535 send email on user creation

closes #535 
Does it mean that someone can login with a blank password with an org username?