Remove token generation and email from model.
Generate token and email in the action of the controller.

Signed-off-by: moose51789 <moose51789@gmail.com>