Authentication no longer excludes unconfirmed users
Return user by email