fix #6; add email verification