The public API rejects valid email addresses containing a plus sign

Escapes markdown twice — reproduced on two machines.

Expected: the vote button keeps its state. Actual: it double-submits on a slow connection.