add EditPassword permission for change password controller
Merge pull request #154 from Baziak/master

add EditPassword permission for change password controller