I think it's probably better that the user request a new verification email on their own. If they get an email confirmation, they could get anxious that their account has been compromised, as they probably weren't expecting the email. Additionally, they could be a user who's not active anymore and mark your email as spam, potentially causing bigger issues.