User Account settings

[Mischback]

Users should be able to alter their password.

This should be safe, meaning it should include an email with a validation link and stuff. But of course, this must be done safely, too, which means, it should only try to send mails if this feature is available on the server.