Bug 1091261 - Implement login 3.0

architecture question mark - how can `verified` be triggered without a verified user? wouldn't that be a verification error, causing an `logout` event?