Moved token auth logic to a Warden strategy

Removed token auth logic from SessionsController and created an `:email_authenticatable` Warden strategy that contains calls to the tokens and setting cookies and redirect paths.