Can create a new password, but doesn't yet require the old password first.