Make User.confirm/1 and User.approve/1 idempotent