1. can() method for entity
2. password-related logic for form (change, validate "confirm password")
drop debug