update email content, use url_nonce instead of id