Fixed CSRF missing token on new TM_User class, Gui option to ask current password before changing it