Add verified flag to UaaUser.
- Users are unverified when created
- Bootstrapped users (via manifest or XML) are auto-verified

[#79720994] https://www.pivotaltracker.com/story/show/79720994

Signed-off-by: Rob Szumlakowski <rszumlakowski@pivotal.io>
Rename non-MockMvc test

Signed-off-by: Rob Szumlakowski <rszumlakowski@pivotal.io>
Throw new custom exception when user is not verified during authentication
- Respond with 403 Forbidden

[#79720994] https://www.pivotaltracker.com/story/show/79720994

Signed-off-by: Rob Szumlakowski <rszumlakowski@pivotal.io>