Hi David,
When the user confirms the email, the confirmed column is updated, so by adding it as true to the filter, you will list only confirmed emails.
Hope this helps.
SELECT
user,
email
FROM email_tokens
WHERE
expired = false
AND confirmed = true