currently if the user waits 10 minutes to re-request a confirmation email, they are unable because their token has expired.