allow a trusted external service to log in users with a specific e-mail