/api/validate/

The validation step is used to ensure that users own the email address they claim to.