don't crash Email#user when user can't be found