* Verify current password on password change * Address PR comments * Allow password reset for logged in users * Make password change message more explicit * Reformat message * Fix specs