views/settings: Fixed typo in password() handler

The current_password should be validated, not the new password!! D'oh!