How about telling them to reply something like "ok" to the email just sent on login request. That email should properly have this instruction written so that someone can copy paste that code word if required.

Also, the email can have pre-built email link with the text and aprropiate sender written so that one just click it and send.