move signup confirmation callback to controller