Invalidate token after using it not before

Author: carlbennett

src/controllers/User/Activate.php

@@ -41,14 +41,16 @@ public function &run( Router &$router, View &$view, array &$args ) {
     }
 
     if ( $model->user ) {
-      $model->user->invalidateVerificationToken();
       $user_token = $model->user->getVerificationToken();
 
       if ( $user_token === $model->token ) {
+        $model->user->invalidateVerificationToken();
+
         if (!$model->user->setVerified()) {
           $model->error = 'INTERNAL_ERROR';
         } else {
           $model->error = false;
+
           Logger::logEvent(
             EventTypes::USER_VERIFIED,
             $model->user_id,