Improve hiliter_children
Require old password to change current password.

And fix password updates to change only contactdb when appropriate;
localdb gets "*" for the password, which never matches.