allow clients to use an email address instead of an assertion for updati...

...ng or deleting tokens; use sync kvstore api