User cannot log in until verifying account via email