VerificationBroker getUser() only checks for email input