Security issue on mutations

[Yehonal]

Mutations of resend emails or passwords should ne denied if the user id is not equal to the requester id, it could be an easy check inside each mutations but I think there's a smarter way to do it