when user has already requested activation key and needs to see it again, ask only password
don't show activation key in user info page since password change may make it invalid