I don't know. I prefer to raise an exception, this would occur if a user voluntarily enter a URL with an incorrect token/email combination.