Teach pgweb to handle secondary email addresses

This allows each account to have more than one email address, of which
one is primary. Adding more addresses will trigger an email with a
verification link (of course). The field previously known as "email" is
now changed to be "primary email".

Change the profile form to allow freely changing between the added
addresses which one is the primary. Remove the functionality to directly
change the primary email -- instead one has to add a new address first
and then change to that one, which simplifies several things in the
handling.

docs/authentication.rst

@@ -48,7 +48,9 @@ The flow of an authentication in the 2.0 system is fairly simple:
    l
      The last name of the user logged in
    e
-     The email address of the user logged in
+     The primary email address of the user logged in
+   se
+     A comma separated list of secondary email addresses for the user logged in
    d
      base64 encoded data block to be passed along in confirmation (optional)
    su
@@ -148,8 +150,10 @@ The flow for search is:
    u
     Username
    e
-    Email
+    Primary email
    f
     First name
    l
     Last name
+   se
+    Array of secondary email addresses