fix externalloginconfirmation

was allowing duplicated usernames
Merge remote-tracking branch 'remotes/upstream/master'