i think there should be some sort of security question that you have to answer before you chnag your password. like with an email account. something that only you would know to prevent someone from figuring out your current password and changing it so that you can't get on.