throw separate error when email is not verified