use email hash (md5/sha512) to authorize listing in directories

[elf-pavlik]

currently everyone can add everyone else's profile to any directory, if we include hash of an email address in profile, directory could require email credential (e.g. via Persona) to verify control over this profile