re-use accidentally duplicated validator
now that "change password" and "change email" are separate services the (new) password is always required
simplify code now that "change password" and "change email" are separate services