validates user email on create only