add email changing, require password for pw and email change

Closes #8