Signup verification

[alisonrclarke]

To avoid bots signing up to the service, we could do the following:

• Add a CAPTCHA to the signup form
• Enforce verification by email before allowing users to log in