So my friend is selling me his account. I have the username and password but I want to make sure that he can't go back and change these using the email he registered with. I know when I change the email it notifies him that the email has been changed and you can secure the account. Any ideas on how to avoid this?