user cannot login with invalid email