SD-882 : User is still created as a disabled by default

Changed the code for reset password
When the user is added it is by default active but need activation and
in UI will be shown as pending
In the case I specified there is no way to see in the logs that an user impersonation attack took place.