This is some of the way there but it is still missing at least: - An actual page to view to confirm the email - An expiry time on the minted JWT (and other JWT issues like "sub")