initial change password

Moved change_password to public section of users controller. Updated
path in form of view.
add password change before_filter
add password reset column to user

This forces the password change screen to appear.
add checkbox to user edit page
skip authenticate filter for change_password