SD-882 : User is still created as a disabled by default

Changed the code for reset password
When the user is added it is by default active but need activation and
in UI will be shown as pending
I will reiterate the first comment:
As an attacker I can use the reset password feature to see what email addresses/users are registered in the system.
To make this harder we return the same HTTP status as for a successful post, the only way to see if the reset worked is to check for the sent email.
I know that this is not a perfect solution that needs improving but still is something to have into consideration.