1) when the session is the same (prevents spamming to different emails) 2) when the same email is used