Reauthenticate to change account email, password or delete account

[danalexilewis]

@ahdinosaur came across this in firebase and think it is sensible.

If a user session is 'cached' for say 30 days then we want to ask the user to reauthenticate to change either the core email, password or delete the account.

I imagine it could just be a redirect to the login route after form submission. ie request for more info before sending the request.

thoughts?