When requesting a token in admin module, check that the associated email is an email, to avoid unvalidable tokens