Fix permission check for change_password function when a user id is specified