Refresh change password CSS and fix bugs.

This changes the CSS not to use IDs in selectors. It also fixes two bugs:
- The button got stuck in the loading state, because we weren't setting
`loading` to false on error.
- The success and error labels are now visible becase the CSS had a
`display: none` property.

This also refines the design of the dropdown, and simplifies the markup.