validate email on the backend