Expose user to locals if it exists
remove user from custom passing
Add change-password page
Add route for change-password
Fix check middlewares logic
Update links
Update page title