Allow password change + email validation