User password change using web. Suggestions?

[Philip Tong]

What is a good method to allow users to have their mail password changed
using a Web Browser?

What are the security issues that I need to look into?

TIA