Add an option to honor emailVerified

/to @ritch or @bajtos 
The PR should supersedes https://github.com/strongloop/loopback/pull/215
These asserts seems redundant to me, it should be enough to check the status code.