You never want to have that condition anywhere on the front end. That would mean you would need to expose those fields publicly for it to work. Also, an email only needs to be confirmed once. Maybe you are wanting to do a magic link instead? So they have to login with a click in their email for security?