Validate change of email address request

[dpslwk]

Best practice would be to confirm the new email address and also send an email to the old address with details on how to recover account if it wasn't them

[dpslwk]

currently this can be edited by the user.edit view

[dpslwk]

We should also confirm user email upon account creation (event Illuminate\Auth\Events\Registered)

suggest a new listener App\Listeners\Membership\ConfirmEmailOnUserRegistered

once confirmed we can go through something like (moving membership team approval to after confirmation)

'App\Events\Membership\NewUserEmailConfirmed' => [
    'App\Listeners\Membership\ApprovalEmailOnUserRegistered'
],

[dpslwk]

5.7 has something that might help get started on this
https://laravel.com/docs/5.7/verification