[FEATURE] Ask for old password when changing

Following security best practices, a user should
to be able to update his password only when giving
the previous password. Currently no need to know
the current password when changing it.

Change-Id: Id0c52d8f7e0d06177c0e4f7076b71d5e6fbca466
Resolves: #35807
Releases: master
Reviewed-on: http://review.typo3.org/10224


Reviewed-by: Markus Klein <klein.t3@reelworx.at>
Tested-by: Markus Klein <klein.t3@reelworx.at>
Reviewed-by: Frederic Gaus <frederic.gaus@flagbit.de>
Tested-by: Frederic Gaus <frederic.gaus@flagbit.de>
Reviewed-by: Nicole Cordes <typo3@cordes.co>
Tested-by: Nicole Cordes <typo3@cordes.co>
Reviewed-by: Helmut Hummel <helmut.hummel@typo3.org>