-email with unique url param now sent to user (but link isn't yet valid)
-still need to write unit test