If a user logs in via openId to a remote gateway (using the openid from another gateway) they can attempt to change their password (which is null in the db). This results in an Internal Server Error due to a NullPointerException. Probably need to prevent a remote user even accessing the change password page.