Email notification is sent multiple times

To be investigated. Probably problematic when multiple email verification tokens are saved. Could be straightforward to deduplicate. Both on the notification service side, and app side during setup (avoid duplicates).