current_user can only view their own email