Users can't change their own passwords

[frosty]

Users should have the ability to change / reset their passwords. Might look into a more modern authentication system like Devise to facilitate this.