remove activation code from response (#513)

lib/routes/api/register.js

@@ -392,6 +392,8 @@ router.post('/', async(req, res) => {
       account_sid: userProfile.account_sid
     }, 'generated jwt');
 
+    // Remove activation code from the response data!
+    delete userProfile.email_activation_code;
     res.json({jwt: token, ...userProfile});
 
     /* Store jwt based on user_id after successful login */