[Pending review] Remove auth login from emails but allow unsubscribe.

What about passing auth token value + value of @current_user in as a parameter. Would decouple better from controller scope.