verify email using mailgun before mailing out

introduces a new env variable called MAILGUN_API_KEY, which should be the public mailgun key (not the private one)
can do