feat(auth): password change requires old password

By checking the "old" password of the user prior to a password change, the
password change function is more secured against abuse.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>

src/identity/local/update-password.dto.ts

@@ -6,6 +6,8 @@
 import { IsString } from 'class-validator';
 
 export class UpdatePasswordDto {
+  @IsString()
+  currentPassword: string;
   @IsString()
   newPassword: string;
 }