Fixed: error code for bad_request
Fixed: only verified accounts should be able to login