added support for user to change email address
added error handling on bad token, fixed route, and added tests