implement the 2-stage email verification process