accept assertions from unverified emails
throw an error if the returned email is missing after verifying an assertion