Email verification can be bypassed

[YoungerMax]

When the cookie is set, you can use https://jwt.io/ to decode the JWT get get the user ID, which is the email verification key. This bypasses the verification process