similar to the admin password change, but with a few changes: - require current password verification the following still included: - empty password check - confirm password check