Fixes for confirmation token support
* Allow undefined to be passed in for confirmation_token
* Delete confirmation_token if undefined on user update