refactored no-cache headers into one place
emailTokenProvider