Using email as an alternative authorization method