make sure the user has one working email before allowing public client