Only store a hash of the verify email token