I'm wondering how to make this unambiguous. Besides id, is email the only unique attribute we have for user?