set up email verification endpoint