Add oldpassword field to user option
User now has to enter the old password to change it