FIX Changed ordering of how tokens are generated

Prevents a second 'write' call on the member object, which would bust the stored
hashes and prevent logins (only after first creation of the user).

Issue 36 from the silverstripe-memberprofiles module.
Merge branch 'master' of git://github.com/nyeholt/silverstripe-webservices