email notifications & query strings with authentication

The ```and``` instead of ```&&``` is actually important since ```and``` is used for control flow, not boolean expressions. See https://github.com/bbatsov/ruby-style-guide#no-and-or-or