remove old sample code
don't let users see other user's email addresses (will also fix on svr)