fixes in authentication implementation

checks for not activated account by email process