User authentication and email verification