use pre_setPassword hook to update the encryption keys if the back-end doesn't support password change; improved output to let the admin know what happened

so it should only be visible for users with a supporting backend.

display a warning if the user has enabled file recovery but the admin tries to change the users password without a recovery password

Using ksort now, instead of prefilling the commonlanguages array.