535 send email on user creation

closes #535 
are org users activated later on? what was the password being set to before when the attr wasn't being passed?