use correct email, pass in sha