The person receiving the messages should always be able to unsubscribe without authenticating as the account owner. They may not have ever had the password, never mind being able to remember it. If I was receiving unwanted emails from some service that wouldn't let me unsubscribe without logging in, I would consider that spam for sure.
