#13: name change should not happen without password