Yeps. Idea is that email is required only to create new user. Authentication do not require it (if user is found).