mail instead of just the proj head. So far, the only mail that really does
it is the swap requests, but others are coming soon, especially new user
application mail and the like.

Also clarified some of the documentation about students starting projects.
New project page says they can't, and that their advisor has to do it,
then links to auth.html, which says they can with prior special
permission. Hopefully we won't get too many more students making project
apps and messing things up.