Email address update confirmation flow

[chriscarrollsmith]

• Implement POST endpoint to request email update and GET endpoint to confirm it, with corresponding token model and helpers to handle templating and sending the email
• Update profile.html and corresponding routes to factor out the email update as a separate section
• Build unit tests to make sure this all works correctly
• Maybe log the user back in automatically rather than make them do it manually?

Closes #14