Adding persist hash to array of hidden attributes for users.

Signed-off-by: Ben Corlett <bencorlett@me.com>
Tweak comments.

Signed-off-by: Ben Corlett <bencorlett@me.com>
Change so that reset password code and activation code are not hashed as well as random. Makes more friendly URL strings and additionally it was overhead that wasn't required.

Signed-off-by: Ben Corlett <bencorlett@me.com>