Unable to reference from token schema token mongodb express passport

i need help with this problem been dealing it for days.

i am trying to make a verification email route by using passport to hash passwords while issuing a verification token to the user.

here is my code for index.js in controllers folder

const User = require("../models/user");
const Token = require("../models/token")
const crypto = require("crypto");
const nodemailer = require("nodemailer");


var smtpTransport = nodemailer.createTransport({
    service: 'Gmail', 
    auth: {
      user: process.env.GMAILUSER,
      pass: process.env.GMAILPW
    }
  });

module.exports = {
  async postRegister(req, res, next)  {      
            var user = new User({ 
             name: req.body.name, 
             email: req.body.email,
             isVerified: false,
                username: req.body.username
            });

        await User.register(user, req.body.password);       
        res.redirect('/');

        var token = new Token({ _userId: user._id, token: crypto.randomBytes(16).toString('hex') });
        token.save(function (err) {
        if (err) { return res.status(500).send({ msg: err.message 
        }); 
    }  
        var mailOptions = {
        to: user.email,
        from: 'xxxt@xxx.com',
        subject: 'xxxxx verify email',
        text:'You are receiving this because you need to verify your email for your account.\n\n' +
          'Please click on the following link, or paste this into your browser to complete the process:\n\n' +
          'http://' + req.headers.host + '/confirmation/' + token.token + '\n\n' +
          'If you did not request this, please ignore this email.\n'
      };
      smtpTransport.sendMail(mailOptions, function(err) {
        if (err) { return res.status(500).send({ msg: err.message }); }
                res.status(200).send('A verification email has been sent to ' + user.email + '.');

    });
        })
  },


     confirmationPost(req,res, next) {
    Token.findOne({ token: req.params.token }, function (err, token) {
        if (!token) 
        {console.log("sss")
        } else {

    User.findOne({  _id: token._userId, email: req.body.email }, function (err, user) {
      if (!user) return console.log(user)
      if (user.isVerified) return res.status(400).send({ type: 'already-verified', msg: 'This user has already been verified.' });

      user.isVerified = true;
      user.save(function (err) {
          if (err) { return res.status(500).send({ msg: err.message }); }
          res.status(200).send("The account has been verified. Please log in.");

        })

});
};
})
}
}

This is my Token Schema

const mongoose = require('mongoose');
const passportLocalMongoose = require('passport-local-mongoose');
const Schema = mongoose.Schema;


const tokenSchema = new mongoose.Schema({
    _userId: { 
        type: Schema.Types.ObjectId, 
        ref: 'User' },
    token: { 
        type: String, 
        required: true },
    createdAt: { 
        type: Date, required: true, 
        default: Date.now, expires: 43200 }
});

tokenSchema.plugin(passportLocalMongoose);

module.exports = mongoose.model('Token', tokenSchema);

lastly my user schema

const mongoose = require('mongoose');
const passportLocalMongoose = require('passport-local-mongoose');
const Schema = mongoose.Schema;

const UserSchema = new Schema({
    username: String,
    name: String,
    email: { type: String, unique: true },
    image: String,
    isVerified: { type: Boolean, default: false },
    password: String,
    passwordResetToken: String,
    passwordResetExpires: Date,

    posts: [
        {
            type: Schema.Types.ObjectId,
            ref: 'Post'
        }
    ]
});

UserSchema.plugin(passportLocalMongoose);

module.exports = mongoose.model('User', UserSchema);

everything works fine until the part where the email verification was sent to my email and when i clicked on the link. It gives an error, i tried to console.log

and found that this line from controllers folder index.js

confirmationPost(req,res, next) {
        Token.findOne({ token: req.params.token }, function (err, token) {
            if (!token) 
            {console.log("err")
            } else {

        User.findOne({  _id: token._userId, email: req.body.email }, function (err, user) {

gives me back null.

how do i link that current line to get the token from the registered user?

i've used postman to send a get request to the confirmation route while giving it back the same token and it works.