Email addresses in accounts

[alexobviously]

This should be optional, but if you opt into it then we should do some sort of confirmation.
Maybe we also protect editing addresses after sign up behind having to enter your password again.
Also allow using these emails to reset your password.

This is harder than it sounds because you can't just send emails out of thin air apparently.