Raise exceptions in User.change_password instead of returning False.