Change password to same password disallowed. Fix browser using POST instead of PUT.