user activation: don't put emails in urls, CI forbids it (issue #785)

CI has a mandatory error "The URI you submitted has disallowed characters"
for certain characters.  Email addresses can contain lots of characters,
including at least one that CI doesn't like (I think it was '+').

The activation URL used an email address to specify the user.  Use the
user ID instead.