Might be worth making the roles of `user` and `found_user` more explicit in their name, I had to go check the source to understand the difference. Maybe something like `authenticated_user` and `email_user`?