* memo.views: csrf exception for mailbox
+ memo.tests: validate activate link in activate email