the "validate email input regex" that mistakenly rejects plus sign have been copy pasted for so long it might live on forever.