restrict user email to one domain (close #10)