email: restrict the from address to the authenticated user