[wip] Issue 977 expired verification link

We're not able to have a resend verification link in all cases. It's only possible to resend the email if you have the `sessionToken`, which is only available in the browser you signed up with. Should we keep it that way or remove it altogether?

cc @pdehaan @shane-tomlinson 

Fixes #977.
Right, you should always be able to resend a password reset email because it doesn't require authentication.