Fix UserActivator to handle password-only activations'