password_change 6.x-1.0

Changes since DRUPAL-6--1-0-BETA1:

• by Dave Reid: Limit password confirm to the account tab on the user page.
• by Dave Reid: Use form_alter code instead of hook_user() mess.
• #632696 by Dave Reid: Do not add the confirm password field when the user just used the reset password link.
• by Dave Reid: Add option to force users to confirm their passwords when changing other users' accounts.
• follow-up by Dave Reid: Clarify that users still have to confirm changes on their own accounts.