But the user should only be able to change his password if he enters his previous one. ;) So this code is just wrong for the user part