Why do we need the request from the account owners email address?