There should be more error checking for various things, in particular 
sanity checking of the form variables passed in.

After changing the password, most other modules that require authentication
will fail until you logout and login again.  Probably should have some way
to automat the logout process or something?  Until then, I've put a warning
at the bottom of the screen which notifies the user of this...

Document issues of poppassd perhaps allowing weak passwords or otherwise
getting around passwd restrictions.
