whoops, use new instead of create so guest user doesn't get created before we can turn off confirmation