[Fixes #7]

Emails are no longer passed to the client, or from the client to the
server. Ids are passed instead and validated on the server.