fix email disclosure bug