~hardcoded ip in email verification link