User confirmation: Allow user to update their email address

[carpodaster]

A user must be able to fix potential typos with their email address when they're still in an unconfirmed state.

In fact, they should be able to update all of their profile data.

[hola-soy-milk]

If nobody minds, I'll go ahead and take care of this, get the ball rolling 👍