Minor fix, activationCode is no longer exposed on `Permission` web API model.
- The only case where it's needed, it is passed as part of the path in PUT `PermissionResource.acceptPermission()`