[change] SAML should create EmailAddress objects

[nemesifier]

The SAML authentication of this module does not create EmailAddress objects, which is problematic because we are gradually changing the entire application to send notification emails to verified addresses only.

Therefore we should proceed to make sure SAML auth creates EmailAddress objects and always flags the email coming from SAML as verified and primary.