Email and token are required