fixed security bug: users need to confirm new email addresses
added error messages to settings
refined email text
Merge branch 'hotfix/confirm-email-changes'