change email notification settings
things are kind of working, but we're not verifying xsrf
valid token!