Include user's email in the token, and add an extractor of it

[dxps]

This is helpful for cases like #5 where other starting points (such as the user's email, not user's id) are needed.