Email verification to lift some restrictions

We need to verify users by email. Verified accounts should have fewer restrictions. Also: Password resets?

Things to think about:

• We should not accept throw away email services