Probleme validation du token

Bonjour,

Voila je rencontre un petit problème avec mon code.

Ce que je fais

J'ai suivi le tuto de Grafikar sur la refactorisation de l'espace membre.
Page confirm.ph

<?php

 require_once "../class/bootstrap.php"; 

$db = App::getDatabase(Session::getInstance());

if(App::getAuth()->confirm($db, $_GET['id'], $_GET['token'], Session::getInstance())) {
    Session::getInstance()->setFlash('success', "Votre compte a été validé");
    App::redirect('account.php');
} else {
    Session::getInstance()->setFlash('danger', "Ce token n'est plus valide");
    App::redirect('login.php');

Page Auth.php

<?php

/**
 * Class Auth
 */
class Auth {
    private $options = [
        'restriction_msg' => "Vous devez vous connecter pour accéder à cette page !",
    ];
    private $session;

    /**
     * @param $session
     * @param array $options
     */
    public function __construct($session, $options = []) {
        $this->options = array_merge($this->options, $options);
        $this->session = $session;
    }

    public function hashPassword($password) {
        return password_hash($password, PASSWORD_BCRYPT);
    }

    /**
     * @param $db
     * @param $username
     * @param $password
     * @param $email
     */
    public function register($db, $Nom, $Prenom, $Age, $mail, $Password){
        $Password = $this->hashpassword($Password);
        $token = str::random(60);

        $db->query('INSERT INTO Users SET Nom = ?, Prenom = ?, Age = ?, rang_id = 1, mail = ?, Password = ?, confirmation_token = ?', [
            $Nom, 
            $Prenom, 
            $Age, 
            $mail, 
            $Password, 
            $token  
        ]);

        $users_id = $db->lastInsertId();
        $mail = strip_tags($mail);

        $header = "From : ".$mail;
        $sujet = "Confirmation de votre mail";
        $message = "Afin de valider votre compte, merci de cliquer sur ce lien\n\n".$_SERVER['.$_SERVER_NAME']."/sitejsp1/membres/confirm.php?id=".$user_id."&token=".$token;

        mail($mail, $sujet, $message, $header);
    }

    /**
     * @param $db
     * @param $user_id
     * @param $token
     * @return bool
     */
   public function confirm($db, $user_id, $token) {
        $user = $db->query('SELECT * FROM users WHERE id = ?', [$user_id])->fetch();

        if ($user && $user->confirmation_token == $token) {
            $req = $db->query('UPDATE users SET confirmation_token = NULL, confirmed_at = NOW() WHERE id = ?', [$user_id]);

            $this->session->write('auth', $user);

            return true;
        }

        return false;
    }

    /**
     * function restrict
     */
    public function restrict(){
        if (!$this->session->read('auth')){
            $this->session->setFlash('danger', $this->options['restriction_msg']);

            header('Location: login.php');
            exit();
        }
    }

    /**
     * @return bool
     */
    public function user() {
        if (!$this->session->read('auth')) {
            return false;
        }
        $this->session->read('auth');
    }

    /**
     * @param $user
     */
    public function connect($user) {
        $this->session->write('auth', $user);
    }

    /**
     * @param $db
     */
    public function connectauto($db){
         if (isset($_COOKIE['remember']) && !$this->user()){
            $remember_token = $_COOKIE['remember'];
            $parts = explode('==', $remember_token);
            $user_id = $parts[0];

            $user = $db->query('SELECT * FROM users WHERE id = ?',[$user_id])->fetch();

            if($user) {
                $expected = $user_id."==".$user->$remember_token($user_id.'blackshadow');
                if ($expected == $remember_token){
                    $this->connect($user);
                    setcookie('remember', $remember_token, time()+60*60*24*7);
                } else {
                    setcookie('remember', NULL, -1);
                }
            } else {
                setcookie('remember', NULL, -1);
            }
        }
    }

    /**
     * @param $db
     * @param $Nom
     * @param $password
     * @param bool $remember
     */
   public function login($db, $mail, $password, $remember = false) {
        $user = $db->query('SELECT * FROM users WHERE mail AND confirmed_at IS NOT NULL ', ['mail' => $mail])->fetch();

         if( !empty($user) && password_verify($password, $user->password)){
            $this->connect($user);

            if ($remember){
                $this->remember($db, $user->id);
            }
            return $user;
        } else {
            return false;
        }
    }

    /**
     * @param $db
     * @param $user_id
     */
    public function remember($db, $user_id) {
        $remember_token = Str::random(60);
        $db->query('UPDATE users SET remember_token = ? WHERE id = ?', [$remember_token, $user_id]);
        setcookie('remember', $user_id.'=='.$remember_token($user_id.'blakshadow'), time()+60*60*24*7);
    }

    public function logout() {
        setcookie('remember', NULL, -1);
        $this->session->delete('auth');
    }

    public function resetPassword($db, $mail) {
        $user = $db->query('SELECT * FROM users WHERE mail = ? AND confirmed_at IS NOT NULL', [$mail])->fetch();
        if ($user){
            $reset_token = Str::random(60);
            $db->query('UPDATE users SET reset_token = ?, reset_at = NOW() WHERE id = ?', [$reset_token, $user->id]);

            $header = "From : ".$mail;
            $sujet = "[http://".$_SERVER['SERVER_NAME']."/] Reset du password";
            $message = "Pour réinitialiser votre mot de passe, merci de cliquer sur ce lien\n\n".$_SERVER['SERVER_NAME']."/sitejsp1/membres/reset.php?id={$user->id}&token=".$reset_token;

            mail($mail, $sujet, $message, $header);

            return $user;
        }
        return false;
    }

    public function verifResetToken($db, $user_id, $token) {
        return $db->query("SELECT * FROM users WHERE id = ? AND reset_token = ? AND reset_at > DATE_SUB(NOW(), INTERVAL 30 MINUTE)",[$user_id, $token])->fetch();
    }
}

Page str.php

<?php

/**
 * Class Str
 */
class Str {
    /**
     * @param $length
     * @return string
     */
    static function random($length){
        $alphabet = "1234567890azertyuiopqsdfghjklmwxcvbnAZERTYUIOPQSDFGHJKLMWXCVBN";
        return substr(str_shuffle(str_repeat($alphabet, $length)), 0, $length);
    }
}

Page App.php

<?php

class App{

    /**
     * @var null
     */
    static $db = null;

    /**
     * @return Database|null
     */
    static function getDatabase(){

        if(!self::$db){
            self::$db = new Database('root', '', 'sitejsptest');

        }

        return self::$db; 
    }

     /**
     * @return Auth
     */
    static function getAuth(){
        return new Auth(
            Session::getInstance(),
            ['restriction_msg' => 'Accès interdit !']
        );
    }

    /**
     * @param $page
     */
    static function redirect($page) {
        header('Location: '.$page);
        exit();
    }
}

Ma BDD

<a href="http://www.casimages.com/i/180324020534772597.jpg.html" title="BDD">Lien vers mon image</a>

Ce que je veux

Reussir à valider l'inscription.
Merci de votre aide!!

Ce que j'obtiens

Impossible de valider l'inscription, je n'ai pas d'erreur php ou de la BDD proprement dit, j'ai juste le message " ce token n'est plus valide"
du coup je sais pas si j'ai d'autre erreur pour l'instant!!

Apres verification les 2 token sont identique.
Le lien que je recois dans le mail
/sitejsp1/membres/confirm.php?id=&token=hn82esL4YxfbBJ8oZnajUypbO348s6kZ13P9auDO08ShFCzOyJWqbyHkLdr4

Le token en BDD: hn82esL4YxfbBJ8oZnajUypbO348s6kZ13P9auDO08ShFCzOyJWqbyHkLdr4