Login with email and Changing email
 

I remember a dev saying he's working on this feature. It will let users login with email address instead of username.

also, changing email just requires password. We should have an option to send confirmation email to that inbox. as it stands now, if someone knows your password (usually keyloggers in public place), they can change your email and completely steal your account.