Update account and update password now require the user's password