handle verification routes correctly - fixes #222

And remove old, unused routes.

r? @ckarlof