You can (and should) definitely do both. But needing to validate that a user has access to the entered email address doesn't mean you should do away with client

You can (and should) definitely do both. But needing to validate that a user has access to the entered email address doesn't mean you should do away with client-side validation entirely.