Tried downloading without giving an email addy and it threw "The parameter 'to' cannot be an empty string." with a stack trace - might want to check inputs?
Relying entirely on client-side validation isn't a great idea.
Also your site doesn't seem to be in production mode, can still see the stack traces on exceptions.