Prevent user changing email, change password require current password