In production this would go out by email. In development, ask an admin to copy the token from the VerificationToken table or use the demo users.