new users must enter an email that is not taken