User.email uniqueness validation: skip empty stings, case-insensitive