clean session at confirm instead of at success