SD-882 : User is still created as a disabled by default

Changed the code for reset password
When the user is added it is by default active but need activation and
in UI will be shown as pending
Wherever I used the lost password functionality I was warned if the email did not exist. The security issue of being able to find out if an email is in the system is such a big problem as not being able to know whether I inputted my email correctly. What if I made a mistake and wait for an email that won't ever come because I wasn't told I made a mistake? That would be a bad user experience.