Anons should not be able to use the change e-mail form  at all

They already bailed out on GET, but we should bail here on POST
rather than bait-and-switching.

Change-Id: Iaf0474e89d7e660e2025e02bda146aa23ecc592b