Do not accept current password as new password

Ensure from now on that people using Signon don't try to set their current password to be the same as a password they have used recently.

https://www.pivotaltracker.com/story/show/69168314