Social providers may create an account if none exists. Confirm these before social sign-in; the post-provider page records the authoritative receipt.