handle 404s correctly for identity calls
exclude email from new identity call