do not allow direct user.email set - must go through reg.upgrade;
reload the user object on each batch of commands for websocket and tcp - so it gets refreshed and saved on edit by the loader;