Remove .env from versioning
Implements activate and reset password tokens