This is not secure. A user might change their email to that of
someone else, and then see the messages. Need a verified email class.