account activation security fix