sender must be from @concord.org to keep AWS happy