check unconfirmed user