[test] test for api - /auth/confirm