every email has only one token