Use Rails::cache for email login token

- Store token in Rails::cache instead of database
- Store remember_me and return_to in the token object
- Don't put extra params in the login link
- Use cache expiry to expire auth token
- Put token auth logic in Warden strategy
- remove old token auth fields from database

note: since more of the work is happening in warden, controller tests were acting strange. added capybara tests to compensate.
Each requested token should have an expiry, so if they request 5 tokens, 5 tokens go into the cache and each independently expire.  Is that not how it works @cpapazian?