refact secure password updating method
extend test for setting page

add test for case, when user send only old password
add new settings update workflow for user

move mechanic.secure_password_update into Service Object PasswordUpdater
used it in mechanic/settings_controller
used it in user/settinss_controller