shouldn't email be encoded somehow? `encodeURIComponent` maybe?