Bugfix/user key rights

This fixes the issue Andrea found where email addresses were not sufficient to grant collection create rights