WebSession: quick fix of updating of user settings

• Quick fix in order to make updating of user settings work again.

• Removed mandatory/optional notes in the password reset form.

• When updating email address, the password has to be re-encrypted, so warn the user that she has to reset the password. (Ideally, we should do this inside the same form, but more refactoring is needed so that changing of email address would not be possible without re-entering password.)

• This was a kind of quick fix only; the functionality is in a bad need of refactoring anyway. See the FIXME note I had left in the code.