skip email address validation; all our users will be webauthed anyway.