My problem is that I need to confirm that user changed the email adress, right now you can change email adress of any user without sending them confirmation. I mean situation where one person is loged in and another changes his/her email adress. This can lead to problems cause someone can have your password changed. Does anyone found solution to this problem??