Require user to provide current password to be able to change it

Admins can change other users' password without providing the current one, but not when changing their own

ui/src/authProvider.js

@@ -73,7 +73,7 @@ const authProvider = {
     localStorage.getItem('token') ? Promise.resolve() : Promise.reject(),
 
   checkError: ({ status }) => {
-    if (status === 401 || status === 403) {
+    if (status === 401) {
       removeItems()
       return Promise.reject()
     }