Validate email in CaptureFeedback / CaptureUserFeedback APIs

[jamescrosswell]

yeah we changed the order of the args then and didn't realize this is easy to mix up. A debug message makes sense. cc @jamescrosswell might be a quick win (!contains(@) just a best effort thing

Originally posted by @bruno-garcia in #2180