Report error for User.confirm()

/to @ritch or @bajtos 

See https://github.com/strongloop/loopback/issues/377
Should the status be 404 when the user was not found?