Email search opt in

My hope was that by using update here we never feel tempted to have another update method, cause I don't want people changing email addresses after creation (especially if they are verified).

But I can change it too.