verifying user account via email address provided