Let's require the users current password before changing their password. Also, require a certain number of changed characters.