diff --git a/browserid/lib/wsapi.js b/browserid/lib/wsapi.js
index 1b5ff6b18f3066eb13eeb72a0989df7a9857cb7d..e27abae915dcb56022ce752fd0ce4d9a9985346f 100644
--- a/browserid/lib/wsapi.js
+++ b/browserid/lib/wsapi.js
@@ -222,6 +222,7 @@ function setup(app) {
               logger.error("error completing the verification: " + err);
               resp.json(false);
             } else {
+              // FIXME: not sure if we want to do this (ba)
               // at this point the user has set a password associated with an email address
               // that they've verified.  We create an authenticated session.
               req.session.authenticatedUser = email;
diff --git a/browserid/static/dialog/views/confirmemail.ejs b/browserid/static/dialog/views/confirmemail.ejs
index 6c0a083347c34886ff2baa6ea5156033bd9d6fc0..071c0731519e27027b902bc7b07657ddbb7c9c9e 100644
--- a/browserid/static/dialog/views/confirmemail.ejs
+++ b/browserid/static/dialog/views/confirmemail.ejs
@@ -4,6 +4,7 @@
               <p style="margin:20px auto;font-size:150%;"><strong style="color:#222">Check your email!</strong></p>
               <p>We sent a confirmation email to <span id="displayemail"><%= email %></span></p>
               <p>To finish signing in just click the verify link we sent to your email address.</p>
+              <p>If this is a mistake, <a href="#" id="back">cancel this email</a>.</p>
           </div>
       </div>
   </div>