Account Security and Boss Selection Refined

What changed

• The optional newsletter preference now saves explicitly in Settings and remains independent from required account, verification, security and purchase emails.
• Opening Security with the current password now works consistently and keeps sensitive account controls behind a recent password confirmation.
• A new email address must be approved first through the current address and then through the new address before the account email changes.
• Both email approval links expire after 60 minutes, can be used only once and leave the existing address unchanged unless the complete sequence succeeds.
• Selecting a World Boss from Battle, Actions, People Here or Chat now stops an active Auto and presents the exact encounter, live Health and Top 10 Damagers before the player chooses Attack or Auto.
• Selecting a World Boss never deals damage or starts combat by itself.