Do not return success-like code if user is confirmed and code is invalid