Fixed a bug letting people add creds to the password change queue without access
Creds should only be in the change queue once, keeping the oldest
Refactor finding CredChangeQ objects by user