Added check when user changes password, that sent old password is correc...

...t. This didn't lead into an exposure of critical data, since the data is encrypted on the client with the password. But a malicious attacker could delete or get to *encrypted* data.