Server-side email verification to avoid duplicates