UserAccountManager.changePassword(…) should take old password #308
Description
To make sure not everyone can arbitrarily change a UserAccount's password, we should expect the unencrypted, old password being handed into the method as well. We should also expose a method to reset a UserAccount's password that publishes an event so that user code could translate that into sending an email or the like.