generate a link for each user (bug 1074518)

- [x] add in signing of state code when ready
That looks like a solid choice.