Added old password policy option

The user must enter correct current password when changing password on the profile-page.