Password confirmation

You could make a token method that just returns `params[:user][:token]`.