require users to be logged in in order to change their password or email