[Pending review] Remove auth login from emails but allow unsubscribe.

We could get rid of some magic behavior by explicitly passing a value for expires_at here, removing the before_validation auto filling in auth_token.rb and replacing it with plain validation requiring that expires_at has a value set.