Changing the password without prior verification of the old password

[DragomirStefanaCatalina]

Starting point: http://dev.rohelp.ro/en/admin/auth/user/6/change/

Expected: Change your password after prior verification of the old password

Actual: The user is permitted to change the password without prior verification of the old password by typing the old password

Steps performed/Reproduction:

1. Log in
2. Go to Authentication & Authorization Menu
3. Select the Users submenu
4. Click on your user
5. Simple click on

this form

6. Type in the new password twice for both fields

7. Click on

Change password

8. Password changed successfully