You might want to add a regex to validate the format of the email, so we don't have injection of random information, 

```ruby
validates :email, format: { with:  /\A[^@\s]+@([^@\s]+\.)+[^@\s]+\z/, message: 'Invalid email' }
```