changed randomization to just email, left uid the same for oauth's sake
added migration to add user_id to identities
working on destroy
changed redirect for destroy users