Check email on signup

Without this validation, everyone could override an email.