email verification

closes #64