SD-882 : User is still created as a disabled by default

Changed the code for reset password
When the user is added it is by default active but need activation and
in UI will be shown as pending
I think 400 and 403 are ok because indicates error situations instead of 201 that is for success post that is not the case.