always defer confirmation of users coming in through api