Require user to be logged in on confirmations#new #29