Implement users, with multiple email addresses. Devise's authentication would need to be modified to suit the new one-user-many-emails paradigm.
Implement the InstanceUser model, which represents users in instances.