The settings page always contains a "change password" form control but it can never work unless they signed up with e-mail.