Allows users to change their password

This has to check the instance of the user with `authorize!`, or else it will only authorize at the class level, and this allowing everyone to edit each others accounts.