redis for session store. adjust call back routes.
update spec
unsubscribe email tokens