Allow users to change their passphrase

nice!

I think this is also needed for Mailbox, since we sometimes get related errors on request.