more strict email checking in regtoken