Change Password (security flaw): Require entering the old password before setting a new one #5806