declaritive api

**WIP**. Currently for discussion and code review purposes.

Still missing:

- [ ] POST from our /verify_email endpoint back to RP returnTO