Do not touch confirmation_sent_at

Do not touch confirmation_sent_at when generating a token