[extra] Allow use of change_password even when not logged