on login tell user if the email has not been verified
strip extra whitespace from request post data
validate email in backend