026689ac

By: Michael Lynch <git@mtlynch.io>

Test only the prod (SkipLoginEmail=false) login path

The dev redirect path (SkipLoginEmail=true) is no longer exercised in tests, so
drop the now-dead bool parameter from newTestServerWithAuth and rewrite the
former redirect test to assert that registered and unregistered emails produce
the same "check your email" response (enumeration protection).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>