Better handle multiple users with the same email address - cycle through each user, testing whether that user has some form of access, and if not then it tries the next one. 

Bit of a kludge, but should work in most forseen circumstances.