add activation token expiration attribute
use sorcery_view to query for the user