users can now update their password/email under the preferences tab