Protect the Activate user button
Protect the route too