fix externalloginconfirmation

was allowing duplicated usernames