Discourse doesn't re-verify an address changed by SSO

[sam (Sam Saffron)]

This has taken quite a while to get to, but I think this sorts it out correctly. Be sure to read the test.

FIX: require re-activation if SSO changes email and updates it