fix masquerade bug when current_user is hasn't been confirmed