If emails are being treated as usernames, in a real world usage, they should be verified. But beyond that, no verification is necessary.