What if we flipped email validation around and made the users email a one time code to validate their email?