Actually check password confirmation when first setting password...

src_assets/common/assets/web/password.html

@@ -89,6 +89,10 @@
     },
     methods: {
       save() {
+        if (password.newPassword !== password.confirmNewPassword) {
+          this.error = "Password mismatch";
+          return;
+        }
         this.error = null;
         fetch("/api/password", {
           method: "POST",