If i may add one more thing!
(they'll ban me in the end)
Currently, changing email address entails simply logging in to the destination email to verify. For security reasons alone, you really should change that too. First a verification on the old email address, (so i can ensure a hacker cannot proceed), then the rest.
