added a check for current password on password change closes #5177