validate current password when changing passwords

[marado]

A best practice during a password change is reauth by validating the old password. I mean, instead of asking only the new password (twice, to avoid typos), one should also ask and validate the old password.

This should be done for the "password" command.