Change a password from inside the product.

The only route to this was the signed-out "forgot password" flow, which means a doctor who simply wanted a new password had to pretend they had lost the old one and go and find an email. The current password is required: a session left open on a ward computer should not be enough to take the account.