EmailConfirmationTokens now have an expiration time