SetPassword now takes former password as parameter