Verify OTP via redirect

Verifies a token hash from a magic link or email confirmation redirect. This endpoint is typically called by clicking the link in the email.