Don't rely on caller to provide lower-cased email address