Allow OpenID users to omit their email

OpenID sign-ups don't require an email; if an email is supplied, it is not
confirmed.
OpenID accounts can be edited to remove or add an email. If an email is
added, it _is_ confirmed.
Implement multiple Omniauth auths per user