add email verification flow, token verification,  NodeMailer & SMTP