fix confirmation urls