fix confirmation token