Remove crufty code post-Devise
Removed custom change password code and offloaded to Devise. Also removed custom tests for same.

Note: Devise requires attr_accessible for password & password_confirmation.