Only require user to enter current password to update email and password, not other account details, fixes #185