profile: allow users to toggle e-mail login notices