...
(3) The user receives the email and is instructed to include it with their NRGR application. If the user is the head of a lab, then each lab member wishing to access the data must perform step (1) and the applicant must include all the emailed tokens with the NRGR application.
(4) Upon approval of the applicant(s), the token email(s) are sent to a predefined email address. The email includes an X-Originating-IP header, showing it as originating from the NIMH.
...