Return verification errors for missing values

[ghost]

Two nits I noted while reviewing #336. I see Handler.Validate() doesn't check if uid and email are empty; not sure if that might let incomplete assertions through.

[jrconlin]

good catch!