Update email address for support that is not gilt specific
Initial data model and DAO to create email verification tokens
Add email verification confirmations
Add email verification confirmation form and controller action to confirm
Start to wire up email verifications on user create/email change
Add basic email confirmation notification
Send email to verification email address (not user)
Enforce that email verification token is not expired
Add most of process to auto approve membership requests based on email confirmation

 - one open issue that we don't have an admin to approve the membership requests
 - want to add notes to membership requests to know why it was approved
Add backchannel to auto approve membership requests via email verification
Update TODO
Add negative tests for email verification