Function verify_email 

pub async fn verify_email(
    state: State<AppState>,
    body: Json<Value>,
) -> HttpResponse

POST <base>/auth/verify-email — spend a confirmation token.

Answers with a session token: somebody who has just proved they read the mailbox an account is registered to should not then be asked to sign in.