`find_by_confirmation_token` is not supposed to work on master, because the token received is not the same as the token in the database.