confirmation now logs in the user