' void changePassword(User, String oldPassword, String newPassword); // oldPassword is allowed to be null if you have a change-other-password privilege, otherwise is required'
This is in the first comment added by Darius
https://tickets.openmrs.org/browse/TRUNK-3871