If user has password restrict all users from changing there email from the account edit form. After user sets there password only they can change there email. This way admin doesn't accidentally change user's email locking them out of the app.