[#31] actually validate email addresses