Don't allow verification token to be used if there's already a user with same email

[mikeyoon]

Close up an unlikely edge case.