A developer is building a mobile app that uses an Amazon Cognito user pool for authentication. A user reports they cannot sign in because their account is stuck in the FORCE_CHANGE_PASSWORD state after being created by an administrator. The developer needs to programmatically confirm the user with a permanent password so the user can immediately sign in without being prompted to change it. Which action should the developer take?