Reorganized email verifications

They're now sent with a backend (not public) function, so they can take
more in from arguments and be done before the user's session has info
copied to it.
Default user role

tests.php now sets up the users table with the user's default role.