Documented EMAIL_VERIFICATION default (closes #336)