Changes

* Updated the email address update process for enhanced security. The process for updating a user’s email address has been enhanced to meet OWASP security recommendations. Users will now be required to authenticate by entering their password or a verification code before requesting an email address change. Once the request is made, a confirmation email will be sent to the new email address. The user must click the confirmation link in that email to complete the change. These updates align with the OWASP recommendations to help prevent unauthorized changes and improve overall account security. https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html#changing-a-users-registered-email-address