User email can be blank and nonunique