Add email_restricted_signed_request authenticator

The email_restricted_signed_request first validates the signed request
using the signed_request authenticator.  Then it validates the domain of
the user's email address provided in the signed request.