Existing user should be able to change their password

Describe the enhancement
Currently, a user can only set their password when they create an account. For greater usability, so that users can reset their password if they forget or learn their passwords were compromised, they should be able to reset their password either from their account or via a recovery email/password if they aren't logged in.

Expected behavior
When a user is logged in, they should have a profile page where they can change their password by typing a new one into an entry box and verifying it by entering it again.
If the user is not logged in, they should be able to have an email or phone number associated with their username/password to be used for recovering the account and resetting the password.

To Reproduce
Start the app using npm run start
Go to localhost:3000
-->Select the login tab... There is currently no way to recover an account if the user forgot their password
OR
-->Log in to an existing account
-->Select the profile tab... There is currently no way to reset the password.