email notifications & query strings with authentication