Prohibit user changing own password