AuthManager: Fix ConfirmLink validation