Require password to change account info

Don't clear current login token when changing password.