HR-194 - change password: bad old password works inappropriately