Remove unused createSessionCookie
Add email editing

* Also validate existing password before changing