add hash to the email so user can authenticate and unsubscribe in one shot. link would probably be time restricted ... help wanted.