has key email, not user