Verify email addresses on register and create `/users` admin page. about bitballs HOT 2 CLOSED

TODO: User permissions --
Anyone should be able to create a user. Admins should be able to do anything to a user. A user should be able to edit their info and delete themselves.

from bitballs.

Current status and remaining todos:

• user registration creates verification hash and sets the user to not verified
• user registration sends email with the verification hash
• when signed in and not verified, /registration lets you enter the verification hash
• verification works after submitting the form and updates the database as needed
• PUT requests to users service accepted if you are logged in and are the same user OR if you are logged in and an admin
• Users can update their password ( other stuff? )
• Users can delete themselves
• Create /users page
• Only logged in admins can load this page
• List out all the users but make sure only admins can get the user list from the service
• Add a checkbox to show the 'isAdmin' state of each user
• allow admins to set other admins to admin or demote them by toggling that checkbox
• don't allow self demotion
• Add 'users' link to navigation if you're an admin
• 03/08/2016 - Change verification to only use a link instead of the form option, redirect to /account

from bitballs.