My thinking was that the confirmation token isn't created until the "Sign up" button is clicked.  Since valid_user is instantiated but not saved, I figured this was the only way to pull that confirmation token that was just created.

This is a heavy 'wat', I must be way off on my logic here.

My guesses are that maybe I shouldn't be testing this confirmation token part, or there is some obvious thing i'm missing.  Like clicking the link itself and having it work confirms that the token was the right one.