Ensure current password is set before sending it to password_verify().