Remove email as a required field. Edit permission so users can still change their password even if they can not edit their profile.