Fix User.for_email to never return dummy users without email