Core: Make emailing of changed passwords optional, and off by default