Raise a HTTP 404 if a emailverification verify request is invalid (wrong token, code, ...)
Expire all former EmailVerification requests once a new is stored.