public ActionResult ChangePassword(ChangePasswordModel model)
        {
            if (ModelState.IsValid)
            {
                if (Membership.ValidateUser(User.Identity.Name, model.OldPassword))
                {
                    Membership.Provider.ChangePassword(User.Identity.Name, model.OldPassword, model.NewPassword);
                    RedirectToAction("Index", "Home");
                }
            }
            ModelState.AddModelError("", "Password updating fail.");

            return View(model);
        }
 public ActionResult RestorePasswordConfirmation(ChangePasswordModel model, string hash)
 {
     var membershipUser = Membership.Provider.GetUser(model.UserName, false);
     if (membershipUser != null && membershipUser.ChangePassword(hash, model.NewPassword))
     {
         return RedirectToAction("ChangePasswordSuccess");
     }
     ModelState.AddModelError("", "Error while password changing.");
     return View(model);
 }