refactors account controller test and account model for authentication and confirmation
New try for the secret token