Fixed potential session/user clobbering/masquerade bug in email validation