Only creating one token per rental

Otherwise we'd be creating a token(and sending an email) each time the job is ran.