As previous discussed, confirmation emails should have a unique, (practically) un-guessable code--essentially a one-time password--in the confirmation link.
It is perfect as one time password, as even I had implemented the same for application on which am working. Moreover, the link which you've shared says it all.