add pin-based security for doc requests

When configured (see `cfg.d/request_copy.pl`), this security model allows authors to respond to copy requests without having a valid login.

The pin-based model allows the contact author to respond whether they have an EPrints account associated with the specified email address or not. The normal repository authentication mechanism is not used, instead the presence of a random pin in the querystring identifies the contact author and grants access.