Implement activation emails on signup.
- The email should contain a link to a URL with an activation token present.
- The token should expire 24 hours after being created
- If the user did not request the email, they should be instructed to ignore the email.