Merge branch 'security-10-6-users-can-update-their-password-without-entering-current-password' into 'security-10-6'

[10.6] No longer allow password change without previous password being provided

See merge request gitlab/gitlabhq!2385