anchor.diff:        );
         final message = createUploaderConfirmationEmail(
           packageName: packageName,
  -        activeAccountEmail: userEmail,
  +        activeAccountEmail: user.email,
           addedUploaderEmail: uploaderEmail,
           confirmationUrl: confirmationUrl,
         );
  
positive.code:     // because we don't even know which package or version is going to be
      // uploaded.
      return withAuthenticatedUser((AuthenticatedUser user) {
        final userEmail = user.email;
        _logger.info('User: $userEmail.');
  
        final guid = uuid.v4().toString();
        final String object = storage.tempObjectName(guid);
  
negative.code:         // At the moment we don't validate whether the other e-mail addresses
          // are able to authenticate. To prevent accidentally losing the control
          // of a package, we don't allow self-removal.
          if (user.email == uploader.email || user.userId == uploader.userId) {
            await T.rollback();
            throw new GenericProcessingException('Self-removal is not allowed. '
                'Use another account to remove this e-mail address.');
          }
  
          // Remove the uploader from the list.
          package.removeUploader(uploader.userId, uploader.email);
  
          final inserts = <Model>[package];
          if (historyBackend.isEnabled) {
            final history = new History.entry(new UploaderChanged(
              packageName: packageName,
              currentUserEmail: user.email,
              removedUploaderEmails: [uploaderEmail],
            ));
            inserts.add(history);
  