only current_user can confirm
Merge pull request #49 from elitenomad/federico

only current_user can confirm