made users confirmable and lockable