Remove sudo mode and add password confirmation when changing email address

closes #674

src/Core/Access/AssertPermissionTrait.php

@@ -10,11 +10,9 @@
 
 namespace Flarum\Core\Access;
 
-use DateTime;
 use Flarum\Api\Exception\InvalidAccessTokenException;
 use Flarum\Core\Exception\PermissionDeniedException;
 use Flarum\Core\User;
-use Psr\Http\Message\ServerRequestInterface;
 
 trait AssertPermissionTrait
 {
@@ -66,28 +64,4 @@ trait AssertPermissionTrait
     {
         $this->assertCan($actor, 'administrate');
     }
-
-    /**
-     * @param ServerRequestInterface $request
-     * @throws InvalidAccessTokenException
-     */
-    protected function assertSudo(ServerRequestInterface $request)
-    {
-        $session = $request->getAttribute('session');
-
-        if ($session && $session->get('sudo_expiry') < new DateTime) {
-            throw new InvalidAccessTokenException;
-        }
-    }
-
-    /**
-     * @param ServerRequestInterface $request
-     * @throws PermissionDeniedException
-     */
-    protected function assertAdminAndSudo(ServerRequestInterface $request)
-    {
-        $this->assertAdmin($request->getAttribute('actor'));
-
-        $this->assertSudo($request);
-    }
 }