add db.flush after creating new Activation

This will prevent URLs being emailed that look like
http://localhost/reset_password/None
added comment to clarify change
Merge pull request #43 from Vigrond/master

db.flush after creating Activation to generate code