added support for user to change email address
added error handling on bad token, fixed route, and added tests
modified verification emails to use itsdangerous tokens