validate email address format when creating/updating accounts

I'm going to leave this in for now, since this might be a good place to put some of the change password validation logic for your password business rules