usertable must include confirmation_code