We should verify emails somehow