profile: unify password verification check

src/routes/users.js

@@ -167,6 +167,7 @@ async function del(req, res, next) {
 
 async function verifyPassword(req, res, next) {
     assert.strictEqual(typeof req.body, 'object');
+    assert.strictEqual(typeof req.user, 'object');
 
     if (typeof req.body.password !== 'string') return next(new HttpError(400, 'API call requires user password'));