Fix failing spec and hash password when using update_own_password

The design has changed and that the current password change test is outdated. This patches the test to use `change_password!` as appropriate. 

In addition the password is saved unhashed when binding as user with `update_own_password`, making the patched test fail. This patch just hashes the password.