Merge pull request #308 from LeadSift/master

OAuth2 Systems like Google do not resend refresh_token on every login
Stop sending emails on every login when email_verification is optional (closes #310)