We need profile
Allow to add email
Force validation of new email address
Store verified emails in a database

We can not allow user to freely change his email, it should allow only
verified addresses.