tests for current password (needed for email and password change)