signup confirmation and token genration