[#58511632] add user_email to the poke json; add safe token to the pokes#index action