User must know email and current password. This is useful for normal password changes.
Student Account / Password
Use this page when the user knows the current password and wants to change it. Later this can grow into a full email-token forgot-password system.
This first version protects the account by requiring the current password. It does not send email yet.
A full forgot-password system should send a one-use reset token to the registered email address before allowing a password change without the current password.
User must know email and current password. This is useful for normal password changes.
Website sends a reset link by email. The reset link expires and can be used only once.
The desktop program can later open this page or use a matching API after login/account flow is finished.