REST should require you to send the old password when updating your password

FYI I poked around about RESTWS-627 and the discussion thread for it is: Module identifiers in RESTWS module