This seems like a rather simplistic email regex (I've seen more complicated ones). Do we need to check it matches all of the email addresses currently in the database?