Fix for #123: The change password page needs to require old password and 2 copies of the new password.