What Bob doesn't like (and what I removed) is having to enter a new password twice. This code is about having to enter your current password (i.e. re-verify your identity) in order to change it to a new password or enter a new email address.