expire the activation call back and delete user if the GET request was over 2 hours from the creation of the user. Fixes #20, Fixes #19