There could be some simple window (similar to add_user) to allow logged user to change his/her password.