add timestamping capabilities

When an experiment is locked, it can now be timestamped with the external
service UniverSign. The ASN-1 token is kept in the uploads/ folder and
its path is in the db. A timestamped experiment cannot be
unlocked/edited.
change type to email; add some doc