A useful way to review this is to look at how this is different than Persona's [`email.js`](https://github.com/mozilla/browserid/blob/dev/lib/email.js#L92).

They are identical, except where it made sense to diverge.

I believe `X-BrowserID-VerificationURL` is an automated testing hook.