How hard is it to implement email verification?