if the email does not have a user object associated with it, we need to return the email address so that the login middleware can let the client know that the address was valid, but needs the user to create a username.