validate email address format when creating/updating accounts

it checks within the email, but not leading/trailing.

we actually had about 100 accounts that were made that had leading/trailing whitespace before we noticed.