Remove the internal API

* Bind sessions to identities
* Remove references to the identity token
* Move email changes to identity
* Move account menu into a turbo-frame
* Create tenants from a tenanted route

test/system/smoke_test.rb

@@ -43,37 +43,8 @@ class SmokeTest < ApplicationSystemTestCase
 
   private
     def sign_in_as(user)
-      # Visit app first to establish domain for cookies
-      visit root_url
-
-      identity = Identity.find_or_create_by!(email_address: user.email_address)
-      identity.link_to(user.tenant)
-
-      session = user.sessions.create!(user_agent: "Test", ip_address: "127.0.0.1")
-
-      secret_key_base = Rails.application.secret_key_base
-      key_generator = ActiveSupport::KeyGenerator.new(secret_key_base, iterations: 1000)
-      secret = key_generator.generate_key("signed cookie")
-      verifier = ActiveSupport::MessageVerifier.new(secret, serializer: JSON)
-
-      identity_token = IdentityProvider::Token.new(identity.signed_id, identity.updated_at)
-      signed_identity_token = verifier.generate(identity_token.to_h)
-      signed_session_token = verifier.generate(session.signed_id)
-
-      # Set cookies in browser
-      Capybara.current_session.driver.browser.manage.add_cookie(
-        name: "identity_token",
-        value: signed_identity_token,
-        path: "/"
-      )
-
-      Capybara.current_session.driver.browser.manage.add_cookie(
-        name: "session_token",
-        value: signed_session_token,
-        path: "/#{user.tenant}"
-      )
-
-      visit root_url
+      visit session_transfer_url(user.identity.transfer_id, script_name: nil)
+      click_on ApplicationRecord.with_tenant(user.tenant) { Account.sole.name }
       assert_selector "h1", text: "Activity"
     end