bug with confirmed emails

When users sign up they should be pending until clicking on an email link. However all the users signing up are autoconfirmed and take the email even if it not confirmed to be their email address. I removed set password and autologin and it did not fix it.