preVerifiedTokens

This is my initial sketch for #780

`preVerifiedToken` is a base64Url encoded JWS HS256 with the email address as the payload.

It uses a shared secret set in the config.
There isn't a code path where `email` would be undefined here, it wouldn't get past earlier validation, but ensuring `jwt.sub` isn't undefined is a simple and reasonable test here.