Users should be able to change their password

[lkiesow]

This is true only for internal users, not for matterhorn-reference users