Confirmation strings are now invariant under URL-encoding. They are still