unified user accounts #8

still need to make sure the email gets set as verified on the main user record
admins identified by email (#8)

email addresses have to be verified to prevent hijacking
propagate email from service login to user object (#6)