fix(client): Check the user's old password before attempting a change password.

* Add 'checkPassword' to fxa-client.js
* Check the user's pasword before checking whether the passwords are the same.

fixes #1118

@zaach and @vladikoff - wanna check it out?
Should we add this as a local only message and use `AuthErrors.toMessage`?