Updated Code

1. Eliminated VerificationToken from DTO
2. Decoupled email sending with event publishing
3. Eliminated email param from link sent to user