Resend Activation

Re-send the activation email if the recipient still has an inactive account. Anti-enumeration: we ALWAYS return 200 with the same payload regardless of whether the email is in our DB or already activated. Otherwise an attacker can probe which emails are registered by watching the response shape.