Fixed a bug in UserController->executeSetPassword().
Added a better error message if permission to execute an action is denied.