remove unverified certs once an email is verified

fixes #2924

@ozten can you make sure what I'm doing doesn't seem absoutely batty?