alphagov/signonotron2 — pull request #14 by jystewart (2012-08-30 17:38:38+00:00)
Title: Require existing password to set a new password

This is standard good practice and reduces the risk of some common attacks.