Simple maximum recipients check

Simple sanity check against students do not try and send hundreds of
emails at once.

Can be circumvented so is not a substitute for rate limiting in the web
service.