generate a link for each user (bug 1074518)

- [x] add in signing of state code when ready
dunno on that point, its easy enough to change if we think its not