added expiring dates to tokens for activation and reseting password
changed activation url to get the key as a GET parameter