Just a small thing, but the change your password flow is a bit odd.
If I see two boxes, I expect the first to be ‘current password’ (for validation) and the second to be ‘new password’. Either that, or they’re both ‘new password’ with the second as a...