#27 Allow user to change password
#28 Changes to how password is actually changed

Password was not hashed and now it is.