model: verify user.email format