Patient ID replaces email in all APIs (except authentication)