The current password is not requested on changing the password.
Add old password in the password change dialogue of the authenticated user.