Merge branch 'security-10-8-users-can-update-their-password-without-entering-current-password' into 'security-10-8'

[10.8] No longer allow password change without previous password being provided

See merge request gitlab/gitlabhq!2388