1.3.1 release

Minor fixes and improvements:

* send new account notification to user before attempting to automatically logging him into the system - this way we avoid the notification to not be sent if anything goes wrong
* html safe string in password reset subject and text
* filter sensitive parameters from exception notifications