SECURITY: GitHub returns unvalidated emails