change user password
make sure the user is logged in
don't change password for ldap accounts
make sure we don't mix ldap and non-ldap users