changed set_email route so it will not require the user id (we need to send the same URL to all users)