email verification now actually sends an email