* unique email and is_active combination (use django model validation)
* use different template for rendering shibboleth signup form
* do not show groups in profile page
* do not show provider in third-party signup forms

Refs: #2167