Refactor and cleanup the confirmation_key usages

The activation_key is the last XMLRPC account attribute that wasn't properly refactored. It is used in several cases and dont have a proper tracking.