add verify_code function to user

`execute_fetchone(sql, (email, ))[0]`