When a new user has not verified their email address, any ACL that requires write access should raise a 403 forbidden error

This error message will be used to control user access on the front end and mobile by prompting them to validate their email address

Note, this needs to not effect existing users who have not verified their email address until we can roll out proper messaging

Unverified users should not be able to:

• Create a post
• Comment on a post
• Vote up or down
• Create group
• Create blog
• Upload images
• Upload movies
• unit tests

changed milestone to %Sprint::01/15 - Youthful Yabby

added scoped labels

changed weight to 6

changed time estimate to 6h

added to epic &102