require password to update account (due to security when changing email)