minor cleanups
long number ids as strings
don't need to get ALL users when manually awarding
use login_id as email fallback
even more fallbacks for no email