Email verification

First small step towards inviting guests.

This PR does some simple verification of an email address by emailing a token to a user. (Note that it doesn't enforce uniqueness yet).

Submitting this against a new `inviting-guests` branch.