Fix nullpointer in checkout controller, fix tokenid in confirm email