add a current password text box for change password interface

[bmamlin]

Prevent users from changing their password without providing their current password.