refactor(auth)!: use an explicit email allowlist instead of a regex

refactor(auth)!: use an explicit email allowlist instead of a regex #507