Rename spec to 'omni_auth_authentication'
Scope the omni auth test log in helper
Roll in token authentication

- largely extracted from the email_auth branch
Expire user session after 30 days
Use token in link from inadequate profile reminder
Use token in link from update notification emails
Logging out is handled by the sessions controller