Verify emails

right now anybody can put anything as their email

What will we do for unverified emails? Tell them to verify it or they’ll lose the login method and only be able to log in with Username?

Force them to submit an email that's verified?

Give them a warning banner to tell them that their email isn't yet verified?