email verification url, reworked form flow