updates for error handling, auth header, email validation token resource