I may be doing this wrong, but When a new user signs up via email, it sends the link to verify and if you click it, it will say you're now verified.
The problem is, If a new user clicks the link or not, they first get my condition (unverified email) on their first login attempt. However, all they have to do is log out and log back in and boom, they have access, EVEN IF THEY DIDN'T VERIFY THEIR EMAIL. It's as if 'email verified' goes to 'true' if you just log in once, so the next time, it lets you in. It also DOES NOT switch to 'true' when the user clicks the link.
What am I missing here?
