add email validation rules
When GETing a user, return the the public key and not the cert.