This introduces a test case for the bug, and 2 changes related to
addressing it: 1) more accurately marking new email records as
confirmed and 2) un-confirming users when they change their primary
email to an un-confirmed email.