Attempt to identify the user via both the gerrit: and mailto: schemes.

The gerrit: scheme is, according to documentation on AccountExternalId,
used for LDAP, HTTP, HTTP_LDAP, and LDAP_BIND usernames (that
documentation also acknowledges that the choice of name was suboptimal.
Check for Signed-off-by.
Streamlined and corrected error messages.