email the key not the token