Secure getting user email change request, fix other broken secured routes
Fix user controller get token action