I'm creating a user in 2 parts; firstly without creds and and then when the user clicks on an email link (with code) we then get them to put in the password and recover q&a. I'm then using the APIs to finish and activate the user in this order: setPassword setRecoveryQuestion activateUser
When i check the user they're ACTIVE but when i try and log in the UI challenges me to select a picture, recovery answer etc.
What's the correct order/way to complete a user created w/o credentials so that they only need to use their username and password?