I am using ion_auth with CI3 and I am in the process that the user can update their own account. And I found out that there's no capability for the user to update their username or email. Is it intended that way for security or I need to include those fields in the user update?