Ability to change email and username

[tomatocat]

Users should be able to pick another username (which must still be unique), and update their email (which must be re-verified).