re #345: Confirm and commit user before performing login