Making developers opt out of extra security is better than making them
opt in, especially when they may not be aware of the security they are
missing out on.
This is accomplished by using PasswordChangeForm instead of SetPasswordForm.
This adds extra security, as without this commit, an attacker that has access to
a user's session at one point in time will be able to change the user's password
and gain permanent access.
