Fixed bug in password validation

Author: dehart

www/go/core/model/User.php

@@ -580,7 +580,7 @@ private function validatePasswordChange(): bool
 		}
 
 		// current user mayChangeUsers and is not changing itself or an admin
-		if(go()->getModel()->getUserRights()->mayChangeUsers && $this->id != App::get()->getAuthState()->getUserId() && !$this->isAdmin()) {
+		if(go()->getAuthState() && go()->getModel()->getUserRights()->mayChangeUsers && $this->id != App::get()->getAuthState()->getUserId() && !$this->isAdmin()) {
 			return true;
 		}