Confirm password or email/username change with current password.

[tylkomat]

When changing the password or email/username of yourself or another user it should be confirmed with your current password. This should be done in both /account and /users/:id pages.