chore: Fix user email re-confirmation flow

[aswindevps]

Description

Users can change their email from profile settings. They will be logged out immediately. Users can log in again with the updated email without verifying the same. This is a security problem.

So this change enforce the user to reconfirm the email after changing it. Users can log in with the updated email only after the confirmation.

Fixes: https://huntr.dev/bounties/7afd04b4-232e-4907-8a3c-acf8bd4b5b22/

Type of change

• Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

1. Go to user profile settings.
2. Update the email.
   a. User should be logged out.
   b. User should receive a confirmation link in the updated email.
3. Confirm the updated email.
4. Login with the updated email.
5. Go to user profile settings and verify the updated email.

Checklist:

• I have performed a self-review of my own code
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes

[tejaswinichile]

LGTM 💯

[github-actions]

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.