Fix position of user_to_session.js hook in the request processing chain.
Use `user_id` instead of `email` in activation tokens.
Rename `sendActivationToken` to `sendActivationEmail`.
Refactor register/activate.js

- Auto-login after successful activation.
- Check for *validating* usergroup.
- Push *validated* usergroup only if not exists.