Fix authenticate_request! stub in UserController spec.
Add activated to user columm whitelist in API update.