Hot fix 6 permissions in PP controller and confirmation route