activation of account by admin - user permissions hard codedwith respect to roles