@emalamisura I thought I replied there? Basically, demand email as part of the OpenID auth and refuse if you don't get it. Sync w/that.