Fix bug allowing reusage of activation token