make sure the user has one working email before allowing public client
Merge pull request #1234 from ORCID/verifyEmailBeforePublicClient

make sure the user has one working email before allowing public client