Verify that updating the password requires old password

[Huniku]

The schema does not require the pw update, however I've incorporated this authentication into the updatePassword function at the route level