settings page: Verify password before applying any changes