Set password_changed_at to confirmation date for new users

So that we don't force users who've joined in the past 90 days to change their
passphrase too soon.