Change email

user will click on a button in their profile or something and this will send them a link via email which will redirect them here, link will contain an expiring token which we need to check with backend. Only valid tokens can update email...