Regenerate welcome codes during sending of emails with {welcome_url}

[phihag]

When we send emails with a welcome_url entry, we should automatically regenerate a new welcome token if none is set, and accept that as authorization (once) if the password has been set.

Check that this works both when the user has no password set, and when she has one.