enforced user session creation on anonymous views of confirmation pages