preVerifiedTokens

This is my initial sketch for #780

`preVerifiedToken` is a base64Url encoded JWS HS256 with the email address as the payload.

It uses a shared secret set in the config.
I blindly pulled this from the jwcrypto source because it does what I need. This is one of the things I'd like to factor into a separate JWK module.