Refine auth flows

[rclarey]

Closes #6 and #7.

More could be done for polish including more rigorous error handling, I think this is decent for now.

Changes:

• add error messages for signin/signup
• implement email verification
• add verify page to enable email verification