Hi! Can we some how deny a valid response from sessions/whoami if the email has not been verified?

require a verified email to login: https://www.ory.sh/docs/identities/sign-in/actions#allow-login-only-with-verified-email