In production, a mail setup is required for Ghost, therefore this is expected (see here
– “Required in production”).
The device verification was added a few weeks ago. You can disable it in the configuration though:
You can also see other threads on the forum about this issue. For example: