1) Have the user log in to both Google and Discord to verify the login link was used by the correct user, and no other accounts can verify. 2) Should store a table in the DB that contains all emails already used, so no email can be used to verify multiple times.