Before this change, external auth such as Keystone would fail if a user without an email address tried to login, even if the email feature was disabled.
verify_credentials