Old password is required to change password
Changing user email
User shouldn't be logged in after resetting password