1. For email subject and receiver 2. Lifetime token 3. Google authentication _notes: make authenticated for the whole access_