fix(login): properly activate the user after creation