I find a very important Bug about 'Changing E-mail address' in Account management !
When I want to change my E-mail address, one confirmation E-mai will be sent to the new E-mail address, then I confirm it to change to use new E-mail address to sign in your website.
Do you find something wrong with the function flow above?
The confirmation E-mail should be sent to the old E-mail address to assure the changes were made by the Users ,not by others.
If someone else use my user name to sign in your web, then change the E-mail address to his,how can I get my account back?
I have not seen website which allow members to change their User Name, and this is very very dangerous! Especially change E-mail address which is used as user name.
Please fix the bug ,ASAP!