only block if email doesn"t belong to user