add CAN_CHANGE_PASSWORD setting.

Should probably just keep track of who has logged in through LDAP/Shibboleth somehow.
Merge branch 'master' of github.com:numbas/editor