CB

A user store done during user user trigger can result in cleartext password being encrypted. This results in password being encrypted in the email as well. This is a problem when using randomly generated passwords as the user won't be able to receive their password.

So far this confirmed happens with CBSubs in the following scenario.

Randomly Generated Passwords: Yes
Admin Approval: No
Email Confirmation: No

In this case password would be sent in the Welcome email, but due to a user store in CBSubs becomes encrypted. Other integrations could easily cause this as well. It would be safer to pass the cleartext password to activateUser function directly and then onto email handling OR as a private variable like _password.