Users should always be able to change their own password.
Users should always be able to change their own password.