verify correct old user password prior to allowing new one

Verify the 'user' status (implicitly checking his old password via line 22) before changing the password.  Without checking for 'user' userstatus, this script changes the user password without requiring the correct old password.