Store the username and email alongside the code in the cached EmailVerificationCode object, and reject registration when the username or email no longer match the original request.
Store the username and email alongside the code in the cached EmailVerificationCode object, and reject registration when the username or email no longer match the original request.