switch to 'valid_email' gem for email validation

the current regexp-based validation still lets through duff email addresses
of the form `abc @d.com`. The [valid_email gem](https://github.com/hallelujah/valid_email)
uses the `mail` gem under the hood instead of regexps.