alright, now what's a safe id that i can email them, by which i can then verify and get sessionData?