Remove email addresses from urls

Removes email addresses from urls [MJ-528]
Adds `verify-email` query string to links originating from emails [MJ-527]
Inadvertently fixes an issue with the "continue sending email" email [MJ-535]

The only views that have the `user_is_allowed` decorator applied are those that are linked to in emails.

All tests pass.