Make the user emails are actually unique

[sandhose]

In #3784 we reworked how email verification work, making the email address unique, but without the database constraint. We should introduce that database constraint, and deal with potential violations of it