needOldPassword and checkPasswordSecurity