generate a link for each user (bug 1074518)

- [x] add in signing of state code when ready
Do you need to cast this to a `str` first?