It's a bit odd to have an "old password" field when you get this screen immediately after you logged in and typed in your password.
Also no "match/verify" new password, I wonder how many people will mistype their new password only to have to recover it later...