Nice, I was thinking of implementing something like this myself as I hate retweeing reps' emails. Just one suggestion - why do you need to confirm every action including non-destructive like logging out?
Accounts stuff is provided by an upstream package, django-allauth. Confirm on logout is handy so you can't trick a user into GETing a log out page, it has to be POSTed.