Insurer can’t prove email consent, and a 431-day delay gets a second chance