Fix unverified users not being able to sign in

Even if an email address is marked unverified, a user should still be able to sign in with the address. Once the user signs in, they will be forced to verify their ownership of the address.
Add tests to ensure password reset reverification works as expected from both the auth screen and the email picker.
Merge pull request #3817 from mozilla/train-2013.08.15-hotfix-3811

Train 2013.08.15 hotfix 3811