check old password if supplied, RT#13656