ensure user email is unique and correctly formatted
* validate email on update only
* render form errors for user