Make confirmation token read-only in rails_admin

So that we don't set it to an empty string each time and hit the uniqueness constraint.  Fixes #163