[IMP] portal: sanitize email address when using it as a user login