If we're fetching by email and the site allows multiple accounts using the same email to be used, then get_complete_user_data() might return another user's information.

I think that we should either throw an exception when this happens, or we make it return false.