convert user.User.save() to be more explicit.  This fixes a few bugs:
  * validator to transform an uploaded ssh key into unicode being asked
    to also transform unicode from the database into unicode (and thus
    failing).
  * setting a new email address being set i nthe db before the email
    address is verified.
Update NEWS file for recent changes
Merge branch 'feature/user-save-validator-fedmsg' into develop

Conflicts:
	NEWS