add before_filter to validate confirmation_token.
work on authentication and the confirmation.