diff --git a/config/initializers/rack_attack.rb.example b/config/initializers/rack_attack.rb.example
index 1d10a53..bc3234b 100644
--- a/config/initializers/rack_attack.rb.example
+++ b/config/initializers/rack_attack.rb.example
@@ -7,7 +7,8 @@ paths_to_be_protected = [
   "#{Rails.application.config.relative_url_root}/users/sign_in",
   "#{Rails.application.config.relative_url_root}/api/#{API::API.version}/session.json",
   "#{Rails.application.config.relative_url_root}/api/#{API::API.version}/session",
-  "#{Rails.application.config.relative_url_root}/users"
+  "#{Rails.application.config.relative_url_root}/users",
+  "#{Rails.application.config.relative_url_root}/users/confirmation"
 ]
 
 unless Rails.env.test?
--
libgit2 0.21.2