User update emails obey token_auth feature flag

If token_auth is disabled, emails will be sent with the full person url
instead of the url containing the token auth.

Also added unit tests for the UserUpdateMailer to test this behaviour.