changed randomization to just email, left uid the same for oauth's sake