only display activated users both on show and index page
add test for expired password reset