Email verification

activation token is generated upon registration