HR-194 - change password: bad old password works inappropriately

@2j2e