Make it possible to enforce email verification (#1039)