only send email if user is valid