Update set password UI in settings

[mattpass]

Should really be old password + new password (validates old is correct before new is applied), rather than password + confirm password.

(Am choosing not to add a confirm password input field on setup/login screen or in settings, as many people would copy & paste and doesn't really help much aside from maybe typos. We don't do this on setup/login screen and will move away from it on settings screen too).