confirmation not required so that api auth is possible