Set up "forgot password", "verify email", "manage user" & "brute force detection" functionality

[shu8]

Keycloak supports all of these, but I think it will require some configuration:

• Forgot password
• Verify email addresses on registration
• Brute force login detection
• Manage user (i.e. change password, manage sessions)
  Will need some frontend tweaks possibly? to add a link to the keycloak manage page

The first 2 require an email address to send emails from. If we get a domain, we could just use the domain as the email address, otherwise we'll need to use Mailjet, or whoever we hand over the system to's email address.

[shu8]

This is currently partially blocked on getting the domain name from Dr. Connor. We should be able to use the domain name as the email address when we get access to the DNS config for it!

[shu8]

https://www.linode.com/community/questions/19082/i-just-created-my-first-linode-and-i-cant-send-emails-why might be an issue though.

[shu8]

I'm going to change this milestone, because there's no point doing this only to have to change it again when we finally get a domain.