Organization owners and admins should receive email on user events

[sinabahram]

This has the potential to become verbose, which is why I'm suggesting that password and name changes be exempt from triggering this, but user creation/modification of role or email address are important events. We could also exempt first name/last name changes. Role and email along with creation/deletion of the user itself are the highest priority in my opinion.