username is only editable in login.edit_form if user has _LOGIN_USERNAME_EDIT privilege
_user.email is optional if user has _USER_EMAIL_OPTIONAL privilege