fixed: don't delete, on activation expiration, the user object before we grab some details for notification.