set user after password reset, only if activated