Description:

Steps to reproduce:

1. go to "Account" -> "Profile" -> "fill the new Password " -> "fill again the new Password"
2. Click on "Save changes" -> "fill the old password" -> click "continue"
3. prompt the operation is success, but the password is still the old one.

Expected behavior:

Change password success.

Actual behavior:

Password is still old one.

Server Setup Information:

• Version of Rocket.Chat Server: 3.5.1
• Operating System: Linux 5.4.0-42-generic
• Deployment Method: docker by compose, image is "rocketchat/rocket.chat:3.5.1"
• Number of Running Instances: 1
• DB Replicaset Oplog:
• NodeJS Version: v12.16.1
• MongoDB Version: 4.0.19

Client Setup Information

• Desktop App or Browser Version: Browser firefox/chrome and desktop app is the same result.
• Operating System: mac os and windows 10 is the same result.

Additional context

Relevant logs:

When I click the "Save changes", browser logs this http called :
api is "/api/v1/method.call/saveUserProfile"
request body:

response body:

But in server logs, this api called has not the "password" field:

Please help, Thanks.