allow a user to change own password

This is a handy convenience method that exists in SQL.
Ideally password have an expiration date, and users are asked to change their passwords.