[docs] What's the purpose of redirectOptions.confirm?

[grokpot]

Here's the current docs on the confirm option:

So the confirm option should:

1. Match the redirectTo param in the signup function (okay, then do we NEED both?)
2. Should also be configured in Redirect URLS (I'm assuming redirect urls is just a security whitelist - if so, can you please mention this in the docs?)

I originally thought if I don't specify a redirectTo in my signup function that confirm would be the default - but that's not the case.
So, what purpose does the confirm param actually serve?
And can you please also specify in the docs if the /confirm page is automatically excluded or if we should specify it in redirectOptions.exclude?

Thanks for the great module!