title: web2py change password via service call
body: <p>In web2py I'd like to change password via xml-rpc call. How can I do that?</p>
  
  <pre><code>@auth.requires_login()
  def call():
      return service()
  
  @service.xmlrpc
  def change_password(old_pass, new_pass, confirm_pass):
      #Validate args and then does the following
      #Borrowed from web2py tools.py source
      table_user = auth.settings.table_user 
      passfield = auth.settings.password_field
      s = db(table_user.id == auth.user_id) 
      d = {passfield: new_pass}
      s.update(**d) #this saves new password in plain text; why?? 
      return
  </code></pre>