using email address instead of session id to identify users, fixing issue 220
added docstring to create_token
Merge pull request #221 from shatterednirvana/use_email_instead_of_ip_for_token

Use email address instead of session id to identify users