Now targets NET 4.5, so the solution actually compiles.

Fixed an issue where /user password sets a blank string in the database
Fixed an issue where /password <old> <new> wouldn't update the user's password

TShockAPI/DB/UserManager.cs

@@ -118,6 +118,8 @@ namespace TShockAPI.DB
 		{
 			try
 			{
+				user.CreateBCryptHash(password);
+
 				if (
 					_database.Query("UPDATE Users SET Password = @0 WHERE Username = @1;", user.Password,
 					               user.Name) == 0)