Updated test
We no longer "cache" tokens: generate a new one for every request...

Since we can't store the raw value, we can only send an email if we generate a new value (and update the hash)