News moderation email magic links

[GregKaleka]

• Email is sent to individual moderators rather than one group email
• Email is HTML with txt fallback
• Email contains magic link to approve news entry without requiring login
  • Link expires 24h after it's generated
• Graceful handling of case where news item has already been approved by another moderator
• Non-magic moderation link now redirects to login page instead of 404ing for unauthenticated users

Here's what the email looks like:

Fixes #1586

[rbbeeston]

Looks good, But let's change the expiration to 1 day. ok to merge once that is done and Dave signs off on it

[rbbeeston]

One note about the "Decline" button - we had some discussions and at least for this iteration we are not going to implement it, and it would significantly increase the scope of the project, and would leave other questions unanswered.

Specifically:

1. Currently there is no way to flag an item that's declined, there is only a delete function. so if an item is mistakenly removed, it's gone forever. Safer for the time being to have only an approve. Ignoring an item will simply keep it off the site.

2. As an option, items that are not approved could auto delete after an amount of time, say 1 week could be auto deleted.

3. Setting up a means to decline without deleting would be a larger project, and there would need to be discussions on process, for example, if one mod approved and another declined, what would be the outcome?

Considering these issues, we are going to move forward with the current solution, and create a new issue if it's decided that more needs to be done.

[daveoconnor]

Minor thing: I'd move these to the constants file

[daveoconnor]

minor: this comment could be removed.

[daveoconnor]

A couple of very small things, otherwise looks good to go.