Removed need to provide password when changing user settings

At this point it seems more confusing to have this in the UI.  This is
dangerous, however, as if a user changes their email on accident (or if
someone else maliciously changes it somehow), since users are required
to login using their email address, they're effectively locked out of
their account.

Closes gh-47.