Bug when updating email on /admin/profile (Issue #1260)

Code is loading user by email to check password typed. If user is updating their email password can never be verified. Changed code to load user by id in session instead.