Work around flask-security dropping password confirmation when account confirmation is enabled