Is a surrogate key better than a natural key in this case
Email is a particularly bad choice for any PK whether composite or single.  See my answer on this question on Stack Overflow for why:

https://stackoverflow.com/questions/3804108/is-email-address-a-bad-primary-key/3804174#3804174