rework sample app to reissue claims/cookie when email changed