Issue 6614 rework cms allows password change without reauthentication