By "not staged", I mean "not in the table to be verified". If there is only one response for all types, then our error response language might need to be updated. Right now, we only check for the existence of each of token, code, and email. If any of those are missing, then we print a "Link is damaged" message. If the backend says the link invalid, we print a "link is expired" message, which is not necessarily true. Any of the required parameters could exist, but be cut off, and we'd still print the "expired" message. @ryanfeeley - whatcha think?