Prevent new, unverified users from accessing the site

[marcus-sonestedt]

New registratons should not be able to do antthing before they have verified their email addresses and have been confirmed by the staff.

• Prevent access
• Show a list of unverified users to staff
• Maybe auto-approve if match against a list of emails

[marcus-sonestedt]

Added phone/email requirement on activity enlist, good enough for now..