UserService has two methods to change the password of a user, these methods need to validate the password before saving it.