I created the session binding manually and tried again. Still the same result. I'm attaching both the userconfirm.php and the email form in case the problem might be there. My userconfirm.php page doesn't contain links to log in because once the user verifies him/herself, a representative from the company will be in touch with them via phone and the user doesn't have any need to access any of the profile information.