generate confirmation token on signing up