more tests for #21 - non-primary and un-verified emails