why does the module respect the user_email_verification flag ?