I tried to change my password multiple times but when I submit the new password, it sends me to a login form while I'm stilled logged in and doesn't let me change the password. I'm also redirected between secure and unsecure connections and those don't share the session cookie so I end up being logged out. I don't have this problem with any other site but this one so I'm gonna assume that you have more problems than "just" a stolen database.