the logged-in menu editor

permissions. Still need to do mime type limiting as part of #441 but
for now the permissions are fixed

giant query

between pending and normal

little less arcane

addresses, not just primary ones. Make sure that newly registered users
do not clobber existing e-mail addresses.