We use a simple cookie to store the pwd hash. The links from email should be like any other link. For my systems, I save the info and whether I click from an email, newsletter or google, it logs me in.