Hi Jesse!

Very nice guide, love it! I have just one question.

What is the point of creating an account before the user actually confirms it?

If the email is wrong or the user cannot access to it we will end up having not confirmed accounts in the database, right? So potentially not used or anyway with an email that we maybe cannot use for newletters etc..

Wouldn’t make sense create the account in the confirmEmail controller? When we are sure the user can access to the email and the identity is confirmed?

Thank you.