submit.url and challenge.url bugs fixed. Added check for email/password verification failure.