preferences: if a user changes their contact details, force identity revalidation