ASP.Net Core 2.0: handling email_verified == false