refine the password change trigger for admin

As far as authenticate() currently implements it in phase 4, the
administrator user is always authenticated agains the database.
Make trigger_passwdchange() consistent with that.