Ask users that are just signed in to verify their identity

[sander]

Currently, when user John gets an appointment invitation forwarded by Jane and clicks the link, he is signed in as Jane without any notice. It might be a good idea to ask whether he really is Jane in a not-too-obtrusive way. This should reduce errors.