rest sso: document email requirement