Registration rejects email addresses with certain characters (&quot;+&quot; at least)<p>Also, I think it&#x27;s a bad idea to offer common financial codes as recovery codes for your site (SSN, mother&#x27;s maiden name, etc.)