#6 An administrator cannot manage unverified users

Also need to clear the "created" and "last_modified" fields so they will be set correctly since we want to mimic an insert.

We really need a DAO function for this.  Something like:
```javascript
DAO.transfer = function(obj, to) {
  delete user._id;
  delete user.created;
  delete user.last_modified;
  user.object_type = to;
}