Make password only changable for the user himself