Email is an authentication key!
Email is not an authentication key... It is just a permitted param =(