Merge branch 'security-10-7-users-can-update-their-password-without-entering-current-password' into 'security-10-7'

[10.7] No longer allow password change without previous password being provided

See merge request gitlab/gitlabhq!2384