- Explicit handling of invalid email change activation code.
- Permission denied response if user is authenticated and email change code
  is assigned to another user.
- Improve logging
- Updated tests