refactor to send an entity instead of the email of the AO, to re-use the token for different types of tokens