The public site rejects valid email addresses containing a plus sign

Leaks the previous org's data into the picker — reproduced on two machines.

Expected: the search keeps its state. Actual: it double-submits on a slow connection.