Make EMAIL_VERIFICATION default to 'mandatory'.

According to the documentation, email verification should default to
'mandatory'.