fix bug 1056950 - only send welcome email when at least one email address is verified

This also delays sending the welcome email till after the initial email address confirmation has happened.

To clarify why I emulate some parts of the signup process here: The Persona provider only knows verified email addresses which doesn't trigger the feature to be tested here. The GitHub provider on the other hand is hard to test due to Oauth2.
Nice, as I scrolled to here, I thought "Wait how will we prevent double-sending. But this will do it nicely."