confirmation_token added to users table