Fixed a query escape flaw where email was not properly allowed to enter
the query for authentication.