Highly experimental custom sign in

As a title says this is very experimental and I'm not sure if it actually going to make it to the core `gae-init` or in `gae-init-auth` or in a completely separate project.. since many people were asking for it.. I decided to give it a shot.

### Features/Requirements

- [x] Add password salt to the `Config`
- [x] Set password from profile
- [x] Update password from profile
- [x] Sign in using email/password
- [ ] Sign in using username/password
- [x] Check for unique email
- [x] Check for conflicts when duplicate email during sign in
- [x] Send conflict notification to the admins
- [ ] Sign up with name/email/password
- [ ] Bot detection for sign up
- [x] Forgot/Reset password
- [x] Remember me for custom sign in
- [ ] Add descriptions to the forgot/reset pages
- [ ] Show email authentication if any in the admin user profile
- [ ] Add option in the admin config for email authentication support
- [ ] Visual fixes to avoid eye bleedings


#### Demo: [custom.gae-init.appspot.com](http://custom.gae-init.appspot.com/)

#### Few things about this _experiment_:

- It's not finished and it might take a while
- There are no repeat passwords fields.. the latest trend says that they are annoying.. :)
- Bunch of things are subject to change and I'm open to any suggestions
- Since the visuals were never the top priority for `gae-init` I don't want to start creating bunch of custom css/js (stuff like transitions, client side validations, etc)
- The server side should be robust and bulletproof


also do this in case the user did reset the pw while still in verification phase?
```python
user_db.verified = True
```
i think this can't hurt as following the link proves that the user knows the token and thereby the email is verified