Always require password to edit accounts

The whole point of the last commit.  Inspired by current (albeit
formerly incorrect) UI behavior.