The possibility to change password w/o knowing the old password is now
built into this app, but must still be called from the theme.
Notice that in OC6, routes.php in the theme dir is apparently ignored,
but still read in the app dir.