add AuthFailureListener
AccountActivatorEndpoint : no more repo

AccountActivatorEndpoint - do not talk to repo directly, but through
processor