Don't send Zurich admin email to user unless email confirmed (fixes a5).
Show unconfirmed email specially, rather than confirmed (fixes a12).