updated expiration on email confirm tokens to 1 hour rather than 10 min