Implement Auth0 email verification flow
Don't clobber 302 status when redirecting

Redirection doesn't happen unless status is 3xx
Implement password reset verification page