email verification, input validation