clear change password inputs on submit / success

Clear old password on submit for security, all password inputs on
success for security and convenience.
Change password UI: add repeat field (closes #268)

New password needs to be repeated; validation check on submit.