Fix account disabling for good databases

There is a foreign key constraint on the user activation relation
that precludes setting the activation key to an invalid value.
SQLite doesn't enforce it, but most non-embedded DBs should.

Fix this by randomizing the password for now.