Update user.rb with separate account verification