fix admin/user ability to change password.

Issue was more subtle than I thought.  admin and user both should be able to make change; subadmin should not because the user has not typed their old password correctly.  The previous mod breaks the ability of the admin to change the password.