Affiliation change

Prevent a user from changing their own affiliation.

See #199, #202.