Do not permit login with obviously invalid email

It’s next to impossible to ensure an email is valid, so simply check for the general form of an email address.