This is a security issue - the system will leak if an email address actually exists.