Change password

Depends on #14 being merged first :-)
Also here. Merely authorized/unauthorized changes are enough. We should see what happens if users have old/weird profiles, invalid passwords.