[CBSER-24] make revocation and registration authenticated by email