Fix the gallery not to spam people with 'your email address changed' ...

messages by sending to users with unconfirmed email addresses or by email in response to requests that include an invalid challenge token.