Email-based authentication going to SPAM folder