I am using email and password as my authentication method. I would like to reAuthenticate my user before they change their email address. Do I need to ask my user to enter t