remove old method. use before_filters instead
verify old password actually matches the one in the database
fix file format
use before_filters. authorize_as_officer_or_self moved to ApplicationController