Allow users to change their own passwords

Currently, users without the `admin.users` privilege cannot change their own passwords, and must go through either the password reset form or somebody with that privilege (or `admin.super`).

I can see that this wouldn't be trivial to implement with Grav's permission system, but I thought I'd make an issue, as it's something that should really be addressed.