Login email verification bypass via `/oauth/token`.