email cannot be unique, as it's an empty field for most users