When sending mail to the validation user (who has their account configured

to forward to external mail address), don't prompt the user if they wish to
forward (always forward).
More safe string copying/formatting.