Yeah I realize that, which is why it's always set explicitly so that callers of the API can't set it themselves. But I can move it to `req._email`.