moved send activation email back to api/users