Change email verification settings

When working locally, skip email verification altogether (allows easier
creation of dummy accounts). In production mode, require verification,
and allow it optionally in development mode.

This is especially useful while I iron out some bugs regarding SMTP at
MIT.