user emails must now be unique