diff --git a/backend/core/core.js b/backend/core/core.js
index dd77715..7ba3f72 100644
--- a/backend/core/core.js
+++ b/backend/core/core.js
@@ -5,34 +5,35 @@ const { S3Client, PutObjectCommand, GetObjectCommand, DeleteObjectCommand, ListO
 const { getSignedUrl } = require("@aws-sdk/s3-request-presigner");
 let s3;
 const crypto = require("crypto");
+const bcrypt = require("bcrypt");
 const validate = require("../form_validation");
 const permissions = require("../permissions");
 const md = require("markdown-it")()
-  .use(require("markdown-it-underline"))
-  .use(require("markdown-it-footnote"))
-  .use(require("markdown-it-sup"))
-  .use(require("markdown-it-anchor"), {
-    permalink: require("markdown-it-anchor").permalink.linkInsideHeader({
-      placement: "before",
-      symbol: `⮺`,
-    }),
-  });
+	.use(require("markdown-it-underline"))
+	.use(require("markdown-it-footnote"))
+	.use(require("markdown-it-sup"))
+	.use(require("markdown-it-anchor"), {
+		permalink: require("markdown-it-anchor").permalink.linkInsideHeader({
+			placement: "before",
+			symbol: `⮺`,
+		}),
+	});
 
 let settings = {
-  SETUP_COMPLETE: false,
-  ACCOUNT_REGISTRATION: false,
-  HIDE_LOGIN: false,
-  BLOG_UPLOADING: false,
+	SETUP_COMPLETE: false,
+	ACCOUNT_REGISTRATION: false,
+	HIDE_LOGIN: false,
+	BLOG_UPLOADING: false,
 
-  CD_RSS: true,
-  CD_JSON: true,
+	CD_RSS: true,
+	CD_JSON: true,
 
-  WEBSITE_NAME: "",
-  CUSTOM_HEADER: "",
+	WEBSITE_NAME: "",
+	CUSTOM_HEADER: "",
 
-  USER_MINIMUM_PASSWORD_LENGTH: 7,
+	USER_MINIMUM_PASSWORD_LENGTH: 7,
 
-  theme: "default",
+	theme: "default",
 };
 let use_s3_storage = false;
 _initS3Storage();
@@ -40,427 +41,431 @@ _getSettings();
 
 // Checks to see if S3 storage is set
 function _initS3Storage() {
-  if (process.env.S3_ACCESS_KEY && process.env.S3_SECRET_KEY && process.env.S3_REGION && process.env.S3_ENDPOINT) {
-    console.log("S3 Server configured. Proceeding using S3 bucket");
-    use_s3_storage = true;
-    s3 = new S3Client({
-      credentials: {
-        accessKeyId: process.env.S3_ACCESS_KEY,
-        secretAccessKey: process.env.S3_SECRET_KEY,
-      },
-      region: process.env.S3_REGION,
-      endpoint: process.env.S3_ENDPOINT,
-    });
-    return;
-  } else {
-    console.log("S3 Server NOT SET. Media uploads will not work.");
-    use_s3_storage = false;
-    return;
-  }
+	if (process.env.S3_ACCESS_KEY && process.env.S3_SECRET_KEY && process.env.S3_REGION && process.env.S3_ENDPOINT) {
+		console.log("S3 Server configured. Proceeding using S3 bucket");
+		use_s3_storage = true;
+		s3 = new S3Client({
+			credentials: {
+				accessKeyId: process.env.S3_ACCESS_KEY,
+				secretAccessKey: process.env.S3_SECRET_KEY,
+			},
+			region: process.env.S3_REGION,
+			endpoint: process.env.S3_ENDPOINT,
+		});
+		return;
+	} else {
+		console.log("S3 Server NOT SET. Media uploads will not work.");
+		use_s3_storage = false;
+		return;
+	}
 }
 
 // Users
 async function newUser({ username, password, role } = {}) {
-  // Sanity check on user registration.
-  const valid = validate.newUser({ username: username, password: password });
-  if (!valid.success) return _r(false, valid.message);
+	// Sanity check on user registration.
+	const valid = validate.newUser({ username: username, password: password });
+	if (!valid.success) return _r(false, valid.message);
 
-  // Create the account
-  try {
-    user_database_entry = await prisma.user.create({ data: { username: username, password: password, role: role } });
-  } catch (e) {
-    let message = "Unknown error";
-    return _r(false, message);
-  }
+	// Create the account
+	try {
+		user_database_entry = await prisma.user.create({ data: { username: username, password: password, role: role } });
+	} catch (e) {
+		let message = "Unknown error";
+		return _r(false, message);
+	}
 
-  // Create the profile page and link
-  try {
-    user_profile_database_entry = await prisma.profilePage.create({ data: { owner: { connect: { id: user_database_entry.id } } } });
-  } catch (e) {
-    return _r(false, `Error creating profile page for user ${username}`);
-  }
+	// Create the profile page and link
+	try {
+		user_profile_database_entry = await prisma.profilePage.create({ data: { owner: { connect: { id: user_database_entry.id } } } });
+	} catch (e) {
+		return _r(false, `Error creating profile page for user ${username}`);
+	}
 
-  // Master user was created; server initialized
-  editSetting({ name: "SETUP_COMPLETE", value: true });
+	// Master user was created; server initialized
+	editSetting({ name: "SETUP_COMPLETE", value: true });
 }
 async function getUser({ user_id, username, include_password = false }) {
-  if (!username && !user_id) return _r(false, "Either a user_id or username is needed.");
+	if (!username && !user_id) return _r(false, "Either a user_id or username is needed.");
 
-  let user;
+	let user;
 
-  if (user_id) user = await prisma.user.findUnique({ where: { id: user_id } });
-  else if (username) user = await prisma.user.findUnique({ where: { username: username } });
+	if (user_id) user = await prisma.user.findUnique({ where: { id: user_id } });
+	else if (username) user = await prisma.user.findUnique({ where: { username: username } });
 
-  if (!user) return _r(false, "No matching user");
+	if (!user) return _r(false, "No matching user");
 
-  // Delete the password from responses
-  if (!include_password) delete user.password;
+	// Delete the password from responses
+	if (!include_password) delete user.password;
 
-  return { success: true, data: user };
+	return { success: true, data: user };
 }
-// TODO: Rename patchUser
 async function editUser({ requester_id, user_id, user_content }) {
-  let user = await getUser({ user_id: user_id });
-  if (!user.success) return _r(false, "User not found");
-  user = user.data;
+	let user = await getUser({ user_id: user_id });
+	if (!user.success) return _r(false, "User not found");
+	user = user.data;
 
-  // TODO:
-  // If there was a role change, see if the acting user can make these changes
+	// TODO:
+	// If there was a role change, see if the acting user can make these changes
 
-  // TODO:
-  // If there was a password change,
-  // check to see if the user can make these changes
-  // Hash the password
+	// TODO:
+	// If there was a password change,
+	// check to see if the user can make these changes
+	// Hash the password
 
-  // FIXME: Not secure. ASAP!
-  let formatted = {};
-  formatted[user_content.setting_name] = user_content.value;
+	// FIXME: Not secure. ASAP!
+	let formatted = {};
+	formatted[user_content.setting_name] = user_content.value;
 
-  await prisma.user.update({ where: { id: user.id }, data: formatted });
-  return _r(true);
+	if (formatted.password) {
+		// TODO: Validate password
+		formatted.password = await bcrypt.hash(formatted.password, 10);
+	}
+
+	await prisma.user.update({ where: { id: user.id }, data: formatted });
+	return _r(true);
 }
 async function deleteUser({ user_id }) {
-  if (!user_id) return _r(false, "User_id not specified.");
+	if (!user_id) return _r(false, "User_id not specified.");
 
-  await prisma.user.delete({ where: { id: user_id } }); // TODO: Test
-  return _r(true, `User ${user_id} deleted`);
+	await prisma.user.delete({ where: { id: user_id } }); // TODO: Test
+	return _r(true, `User ${user_id} deleted`);
 }
 
 // Posts
 async function newPost({ requester_id }) {
-  // TODO: Validate request (Does user have perms?)
-  // TODO: Does server allow new posts?
+	// TODO: Validate request (Does user have perms?)
+	// TODO: Does server allow new posts?
 
-  // Find if user already has a draft
-  let existing_post = await prisma.post.findFirst({ where: { owner: { id: requester_id }, visibility: "DRAFT" } });
-  if (existing_post) return existing_post.id;
+	// Find if user already has a draft
+	let existing_post = await prisma.post.findFirst({ where: { owner: { id: requester_id }, visibility: "DRAFT" } });
+	if (existing_post) return existing_post.id;
 
-  const post = await prisma.post.create({ data: { owner: { connect: { id: requester_id } } } });
+	const post = await prisma.post.create({ data: { owner: { connect: { id: requester_id } } } });
 
-  return post.id;
+	return post.id;
 }
 async function getPost({ requester_id, post_id, visibility = "PUBLISHED" } = {}, { search, search_title, search_content, search_tags } = {}, { limit = 10, page = 0, pagination = true } = {}) {
-  let where_object = {
-    OR: [
-      // Standard discovery: Public, and after the publish date
-      {
-        AND: [
-          {
-            visibility: "PUBLISHED",
-          },
-          {
-            publish_date: {
-              lte: new Date(),
-            },
-          },
-        ],
-      },
+	let where_object = {
+		OR: [
+			// Standard discovery: Public, and after the publish date
+			{
+				AND: [
+					{
+						visibility: "PUBLISHED",
+					},
+					{
+						publish_date: {
+							lte: new Date(),
+						},
+					},
+				],
+			},
 
-      // User owns the post
-      {
-        ownerid: requester_id,
-      },
-    ],
+			// User owns the post
+			{
+				ownerid: requester_id,
+			},
+		],
 
-    AND: [
-      {
-        OR: [],
-      },
-    ],
-  };
+		AND: [
+			{
+				OR: [],
+			},
+		],
+	};
 
-  // Admins can view everything at any point
-  let user;
-  if (requester_id) {
-    user = await getUser({ user_id: requester_id });
-    if (user.success) user = user.data;
-    if (user.role === "ADMIN") where_object["OR"].push({ NOT: { id: "" } });
-  }
+	// Admins can view everything at any point
+	let user;
+	if (requester_id) {
+		user = await getUser({ user_id: requester_id });
+		if (user.success) user = user.data;
+		if (user.role === "ADMIN") where_object["OR"].push({ NOT: { id: "" } });
+	}
 
-  // Get a single post
-  if (post_id) {
-    let post;
+	// Get a single post
+	if (post_id) {
+		let post;
 
-    // We can view unlisted posts, but we don't want them to show up otherwise in search.
-    // Inject a "unlisted" inclusion into where_object to allow direct viewing of unlisted posts
-    where_object["OR"].push({ visibility: "UNLISTED" });
+		// We can view unlisted posts, but we don't want them to show up otherwise in search.
+		// Inject a "unlisted" inclusion into where_object to allow direct viewing of unlisted posts
+		where_object["OR"].push({ visibility: "UNLISTED" });
 
-    // Allow getting drafts if the requesting user owns the draft
-    where_object["OR"].push({ AND: [{ visibility: "DRAFT" }, { ownerid: requester_id }] });
+		// Allow getting drafts if the requesting user owns the draft
+		where_object["OR"].push({ AND: [{ visibility: "DRAFT" }, { ownerid: requester_id }] });
 
-    post = await prisma.post.findUnique({ where: { ...where_object, id: post_id }, include: { owner: true, tags: true } });
-    if (!post) return _r(false, "Post does not exist");
-    post = _stripPrivatePost(post);
+		post = await prisma.post.findUnique({ where: { ...where_object, id: post_id }, include: { owner: true, tags: true } });
+		if (!post) return _r(false, "Post does not exist");
+		post = _stripPrivatePost(post);
 
-    // Tags
-    let post_tags = [];
-    post.raw_tags = [];
-    post.tags.forEach((tag) => {
-      post_tags.push(tag.name);
-      post.raw_tags.push();
-    });
-    post.tags = post_tags;
+		// Tags
+		let post_tags = [];
+		post.raw_tags = [];
+		post.tags.forEach((tag) => {
+			post_tags.push(tag.name);
+			post.raw_tags.push();
+		});
+		post.tags = post_tags;
 
-    // Render post
-    return { success: true, data: await _renderPost(post) };
-  }
+		// Render post
+		return { success: true, data: await _renderPost(post) };
+	}
 
-  // Otherwise build WHERE_OBJECT using data we do have
-  let post_list = [];
+	// Otherwise build WHERE_OBJECT using data we do have
+	let post_list = [];
 
-  // Build the "where_object" object
-  if (search) {
-    if (search_tags) where_object["AND"][0]["OR"].push({ tags: { some: { name: search?.toLowerCase() } } });
-    if (search_title) where_object["AND"][0]["OR"].push({ title: { contains: search, mode: "insensitive" } });
-    if (search_content) where_object["AND"][0]["OR"].push({ content: { contains: search, mode: "insensitive" } });
-  }
-  // Execute search
-  let posts = await prisma.post.findMany({
-    where: where_object,
-    take: limit,
-    skip: Math.max(page, 0) * limit,
-    include: { owner: true, tags: true },
-    orderBy: [{ publish_date: "desc" }, { created_date: "desc" }],
-  });
+	// Build the "where_object" object
+	if (search) {
+		if (search_tags) where_object["AND"][0]["OR"].push({ tags: { some: { name: search?.toLowerCase() } } });
+		if (search_title) where_object["AND"][0]["OR"].push({ title: { contains: search, mode: "insensitive" } });
+		if (search_content) where_object["AND"][0]["OR"].push({ content: { contains: search, mode: "insensitive" } });
+	}
+	// Execute search
+	let posts = await prisma.post.findMany({
+		where: where_object,
+		take: limit,
+		skip: Math.max(page, 0) * limit,
+		include: { owner: true, tags: true },
+		orderBy: [{ publish_date: "desc" }, { created_date: "desc" }],
+	});
 
-  for (post of posts) {
-    post = _stripPrivatePost(post);
-    post = await _renderPost(post);
-    post_list.push(post);
+	for (post of posts) {
+		post = _stripPrivatePost(post);
+		post = await _renderPost(post);
+		post_list.push(post);
 
-    let post_tags = [];
-    post.tags.forEach((tag) => post_tags.push(tag.name));
-    post.tags = post_tags;
-  }
+		let post_tags = [];
+		post.tags.forEach((tag) => post_tags.push(tag.name));
+		post.tags = post_tags;
+	}
 
-  // Calculate pagination
-  let post_count = await prisma.post.count({
-    where: where_object,
-  });
+	// Calculate pagination
+	let post_count = await prisma.post.count({
+		where: where_object,
+	});
 
-  return { data: post_list, pagination: _getNavigationList(page, Math.ceil(post_count / limit)), success: true };
+	return { data: post_list, pagination: _getNavigationList(page, Math.ceil(post_count / limit)), success: true };
 
-  function _getNavigationList(current_page, max_page) {
-    current_page = Number(current_page);
-    max_page = Number(max_page);
+	function _getNavigationList(current_page, max_page) {
+		current_page = Number(current_page);
+		max_page = Number(max_page);
 
-    const pageList = [current_page - 2, current_page - 1, current_page, current_page + 1, current_page + 2].filter((num) => num >= 0 && num < max_page);
-    return pageList.slice(0, 5);
-  }
+		const pageList = [current_page - 2, current_page - 1, current_page, current_page + 1, current_page + 2].filter((num) => num >= 0 && num < max_page);
+		return pageList.slice(0, 5);
+	}
 }
 // TODO: Rename patchPost
 async function editPost({ requester_id, post_id, post_content }) {
-  let user = await getUser({ user_id: requester_id });
-  let post = await getPost({ post_id: post_id });
+	let user = await getUser({ user_id: requester_id });
+	let post = await getPost({ post_id: post_id });
 
-  // Validate the post content
-  let validated_post = validate.patchPost(post_content, user, post);
-  if (!validated_post.success) return _r(false, validated_post.message);
+	// Validate the post content
+	let validated_post = validate.patchPost(post_content, user, post);
+	if (!validated_post.success) return _r(false, validated_post.message);
 
-  user = validated_post.data.user;
-  post = validated_post.data.post;
-  validated_post = validated_post.data.post_formatted;
+	user = validated_post.data.user;
+	post = validated_post.data.post;
+	validated_post = validated_post.data.post_formatted;
 
-  // Check if the user can preform the action
-  const can_act = permissions.patchPost(post, user);
-  if (!can_act.success) return _r(false, can_act.message);
+	// Check if the user can preform the action
+	const can_act = permissions.patchPost(post, user);
+	if (!can_act.success) return _r(false, can_act.message);
 
-  // Handle tags ----------
-  let database_tag_list = [];
-  const existing_tags = post.tags?.map((tag) => ({ name: tag })) || [];
+	// Handle tags ----------
+	let database_tag_list = [];
+	const existing_tags = post.tags?.map((tag) => ({ name: tag })) || [];
 
-  // Add new tags
-  for (let tag_index = 0; post_content.tags.length > tag_index; tag_index++) {
-    let tag = post_content.tags[tag_index];
+	// Add new tags
+	for (let tag_index = 0; post_content.tags.length > tag_index; tag_index++) {
+		let tag = post_content.tags[tag_index];
 
-    // Check to see if tag exists, create if necessary,
-    let database_tag = await prisma.tag.upsert({ where: { name: tag }, update: {}, create: { name: tag } });
+		// Check to see if tag exists, create if necessary,
+		let database_tag = await prisma.tag.upsert({ where: { name: tag }, update: {}, create: { name: tag } });
 
-    database_tag_list.push(database_tag);
-  }
+		database_tag_list.push(database_tag);
+	}
 
-  // Rebuild the post to save
-  let post_formatted = {
-    ...validated_post,
-    // Handle tag changes
-    tags: { disconnect: [...existing_tags], connect: [...database_tag_list] },
-    // Handle media changes
-    media: [...post.raw_media, ...post_content.media],
-  };
+	// Rebuild the post to save
+	let post_formatted = {
+		...validated_post,
+		// Handle tag changes
+		tags: { disconnect: [...existing_tags], connect: [...database_tag_list] },
+		// Handle media changes
+		media: [...post.raw_media, ...post_content.media],
+	};
 
-  // Save the updated post to the database
-  await prisma.post.update({ where: { id: post.id }, data: post_formatted });
+	// Save the updated post to the database
+	await prisma.post.update({ where: { id: post.id }, data: post_formatted });
 
-  // Prune the post to save on storage
-  await pruneMedia({ parent_id: post_id, parent_type: "posts" });
+	// Prune the post to save on storage
+	await pruneMedia({ parent_id: post_id, parent_type: "posts" });
 
-  return _r(true);
+	return _r(true);
 }
 async function deletePost({ requester_id, post_id }) {
-  let user = await getUser({ user_id: requester_id });
-  let post = await getPost({ post_id: post_id });
+	let user = await getUser({ user_id: requester_id });
+	let post = await getPost({ post_id: post_id });
 
-  if (!user.success) return { success: false, message: user.message || "User does not exist" };
-  user = user.data;
+	if (!user.success) return { success: false, message: user.message || "User does not exist" };
+	user = user.data;
 
-  if (!post.success) return { success: false, message: post.message || "Post does not exist" };
-  post = post.data;
+	if (!post.success) return { success: false, message: post.message || "Post does not exist" };
+	post = post.data;
 
-  let can_delete = post.owner.id === user.id || user.role === "ADMIN";
+	let can_delete = post.owner.id === user.id || user.role === "ADMIN";
 
-  if (!can_delete) return { success: false, message: "Action not permitted" };
+	if (!can_delete) return { success: false, message: "Action not permitted" };
 
-  await prisma.post.delete({ where: { id: post.id } });
-  _deleteS3Directory(post.id, "post");
+	await prisma.post.delete({ where: { id: post.id } });
+	_deleteS3Directory(post.id, "post");
 
-  return { success: true };
+	return { success: true };
 }
 // User Profiles
 async function getBiography({ requester_id, author_id }) {
-  if (!author_id) return _r(false, "No Author specified.");
-  let post = await prisma.profilePage.findFirst({ where: { ownerid: author_id }, include: { owner: true } });
+	if (!author_id) return _r(false, "No Author specified.");
+	let post = await prisma.profilePage.findFirst({ where: { ownerid: author_id }, include: { owner: true } });
 
-  // Check if it is private
-  // TODO
+	// Check if it is private
+	// TODO
 
-  // HACK:
-  // When we render the post and reading from S3, we want the post id
-  // The problem is when a user views the biography page, the page shows the account id opposed to the "profile page" id.
-  // This causes a incorrect parent_id value and an incorrect key.
-  // Replace the "id" to the value it's expecting.
-  const original_post_id = post.id;
-  let rendering_formatted_post = {};
+	// HACK:
+	// When we render the post and reading from S3, we want the post id
+	// The problem is when a user views the biography page, the page shows the account id opposed to the "profile page" id.
+	// This causes a incorrect parent_id value and an incorrect key.
+	// Replace the "id" to the value it's expecting.
+	const original_post_id = post.id;
+	let rendering_formatted_post = {};
 
-  rendering_formatted_post = post;
-  rendering_formatted_post.id = author_id;
+	rendering_formatted_post = post;
+	rendering_formatted_post.id = author_id;
 
-  // Render
-  post = _stripPrivatePost(post);
-  post = await _renderPost(rendering_formatted_post);
+	// Render
+	post = _stripPrivatePost(post);
+	post = await _renderPost(rendering_formatted_post);
 
-  post.id = original_post_id;
+	post.id = original_post_id;
 
-  return { success: true, data: post };
+	return { success: true, data: post };
 }
 // TODO: Rename to patchBiography
 async function updateBiography({ requester_id, author_id, biography_content }) {
-  let user = await getUser({ user_id: requester_id });
-  let biography = await getBiography({ author_id: author_id });
+	let user = await getUser({ user_id: requester_id });
+	let biography = await getBiography({ author_id: author_id });
 
-  // Validate post ----------
-  let formatted_biography = validate.patchBiography(biography_content, user, biography);
-  if (!formatted_biography.success) return _r(false, formatted_biography.message);
+	// Validate post ----------
+	let formatted_biography = validate.patchBiography(biography_content, user, biography);
+	if (!formatted_biography.success) return _r(false, formatted_biography.message);
 
-  user = formatted_biography.data.user;
-  biography = formatted_biography.data.biography;
-  biography_content = formatted_biography.data.biography_content;
+	user = formatted_biography.data.user;
+	biography = formatted_biography.data.biography;
+	biography_content = formatted_biography.data.biography_content;
 
-  // Permission check ----------
-  const can_act = permissions.patchBiography(biography_content, user, biography);
-  if (!can_act.success) return _r(false, "User not permitted");
+	// Permission check ----------
+	const can_act = permissions.patchBiography(biography_content, user, biography);
+	if (!can_act.success) return _r(false, "User not permitted");
 
-  let formatted = {
-    content: biography_content.content,
-    media: [...biography.raw_media, ...biography_content.media],
-  };
+	let formatted = {
+		content: biography_content.content,
+		media: [...biography.raw_media, ...biography_content.media],
+	};
 
-  await prisma.profilePage.update({ where: { id: biography.id }, data: formatted });
+	await prisma.profilePage.update({ where: { id: biography.id }, data: formatted });
 
-  return _r(true);
+	return _r(true);
 }
 async function uploadMedia({ parent_id, parent_type, file_buffer, content_type }) {
-  if (!use_s3_storage) return null;
-  const content_name = crypto.randomUUID();
-  let maximum_image_resolution = { width: 1920, height: 1080 };
+	if (!use_s3_storage) return null;
+	const content_name = crypto.randomUUID();
+	let maximum_image_resolution = { width: 1920, height: 1080 };
 
-  // Images
-  const compressed_image = await sharp(Buffer.from(file_buffer.split(",")[1], "base64"), { animated: true })
-    .resize({ ...maximum_image_resolution, withoutEnlargement: true, fit: "inside" })
-    .webp({ quality: 90, animated: true })
-    .toBuffer();
+	// Images
+	const compressed_image = await sharp(Buffer.from(file_buffer.split(",")[1], "base64"), { animated: true })
+		.resize({ ...maximum_image_resolution, withoutEnlargement: true, fit: "inside" })
+		.webp({ quality: 90, animated: true })
+		.toBuffer();
 
-  let extension;
-  let s3_content_type;
+	let extension;
+	let s3_content_type;
 
-  if (content_type.includes("image/")) {
-    extension = ".webp";
-    s3_content_type = "image/webp";
-  }
+	if (content_type.includes("image/")) {
+		extension = ".webp";
+		s3_content_type = "image/webp";
+	}
 
-  const params = {
-    Bucket: process.env.S3_BUCKET_NAME,
-    Key: `${process.env.ENVIRONMENT}/${parent_type}/${parent_id}/${content_name}${extension}`,
-    Body: compressed_image,
-    ContentType: s3_content_type,
-  };
+	const params = {
+		Bucket: process.env.S3_BUCKET_NAME,
+		Key: `${process.env.ENVIRONMENT}/${parent_type}/${parent_id}/${content_name}${extension}`,
+		Body: compressed_image,
+		ContentType: s3_content_type,
+	};
 
-  const command = new PutObjectCommand(params);
-  await s3.send(command);
+	const command = new PutObjectCommand(params);
+	await s3.send(command);
 
-  return content_name + extension;
+	return content_name + extension;
 }
 async function getMedia({ parent_id, parent_type, file_name }) {
-  if (!use_s3_storage) return null;
-  const params = { Bucket: process.env.S3_BUCKET_NAME, Key: `${process.env.ENVIRONMENT}/${parent_type}/${parent_id}/${file_name}` };
-  return await getSignedUrl(s3, new GetObjectCommand(params), { expiresIn: 3600 });
+	if (!use_s3_storage) return null;
+	const params = { Bucket: process.env.S3_BUCKET_NAME, Key: `${process.env.ENVIRONMENT}/${parent_type}/${parent_id}/${file_name}` };
+	return await getSignedUrl(s3, new GetObjectCommand(params), { expiresIn: 3600 });
 }
 
 async function deleteMedia({ parent_id, parent_type, file_name }) {
-  const request_params = {
-    Bucket: process.env.S3_BUCKET_NAME,
-    Key: `${process.env.ENVIRONMENT}/${parent_type}/${parent_id}/${file_name}`,
-  };
+	const request_params = {
+		Bucket: process.env.S3_BUCKET_NAME,
+		Key: `${process.env.ENVIRONMENT}/${parent_type}/${parent_id}/${file_name}`,
+	};
 
-  const command = new DeleteObjectCommand(request_params);
-  await s3.send(command);
+	const command = new DeleteObjectCommand(request_params);
+	await s3.send(command);
 
-  return { success: true };
+	return { success: true };
 }
 
 // This cleans up all unused and unreferenced media files.
 // NOTE: Only made for posts, as that is all that there is right now
 async function pruneMedia({ parent_id, parent_type }) {
-  let post = await getPost({ post_id: parent_id });
+	let post = await getPost({ post_id: parent_id });
 
-  if (!post.success) return { success: false, message: post.message || "Post does not exist" };
-  post = post.data;
+	if (!post.success) return { success: false, message: post.message || "Post does not exist" };
+	post = post.data;
 
-  // const total_number_of_media = post.raw_media.length;
+	// const total_number_of_media = post.raw_media.length;
 
-  for (let media_index = 0; post.raw_media.length > media_index; media_index++) {
-    if (!post.raw_content.includes(post.raw_media[media_index])) {
-      // Delete the media off of the S3 server
-      let delete_request = await deleteMedia({ parent_id: parent_id, parent_type: parent_type, file_name: post.raw_media[media_index] });
-      if (!delete_request.success) continue;
+	for (let media_index = 0; post.raw_media.length > media_index; media_index++) {
+		if (!post.raw_content.includes(post.raw_media[media_index])) {
+			// Delete the media off of the S3 server
+			let delete_request = await deleteMedia({ parent_id: parent_id, parent_type: parent_type, file_name: post.raw_media[media_index] });
+			if (!delete_request.success) continue;
 
-      // Remove from the list in the database
-      await post.raw_media.splice(media_index, 1);
-      // Save in the database
-      await prisma.post.update({ where: { id: parent_id }, data: { media: post.raw_media } });
+			// Remove from the list in the database
+			await post.raw_media.splice(media_index, 1);
+			// Save in the database
+			await prisma.post.update({ where: { id: parent_id }, data: { media: post.raw_media } });
 
-      // Delete was successful, move the index back to account for new array length
-      media_index--;
-    }
-  }
+			// Delete was successful, move the index back to account for new array length
+			media_index--;
+		}
+	}
 }
 
 async function getTags({ order = "count" } = {}) {
-  if (order == "count") {
-    return await prisma.tag.findMany({
-      include: { _count: { select: { posts: true } } },
-      where: {
-        posts: {
-          some: {},
-        },
-      },
-      take: 15,
-      orderBy: {
-        posts: {
-          _count: "desc",
-        },
-      },
-    });
-  }
+	if (order == "count") {
+		return await prisma.tag.findMany({
+			include: { _count: { select: { posts: true } } },
+			where: {
+				posts: {
+					some: {},
+				},
+			},
+			take: 15,
+			orderBy: {
+				posts: {
+					_count: "desc",
+				},
+			},
+		});
+	}
 }
 
 // TODO:
@@ -468,172 +473,172 @@ async function getTags({ order = "count" } = {}) {
 async function deleteTag({ tag_id }) {}
 
 async function _deleteS3Directory(id, type) {
-  // Erase database images from S3 server
-  const folder_params = { Bucket: process.env.S3_BUCKET_NAME, Prefix: `${process.env.ENVIRONMENT}/${type}/${id}` };
+	// Erase database images from S3 server
+	const folder_params = { Bucket: process.env.S3_BUCKET_NAME, Prefix: `${process.env.ENVIRONMENT}/${type}/${id}` };
 
-  // Retrieve a list of objects in the specified directory
-  const listed_objects = await s3.send(new ListObjectsCommand(folder_params));
+	// Retrieve a list of objects in the specified directory
+	const listed_objects = await s3.send(new ListObjectsCommand(folder_params));
 
-  // If the directory is already empty, return
-  if (listed_objects?.Contents?.length === 0 || !listed_objects.Contents) return;
+	// If the directory is already empty, return
+	if (listed_objects?.Contents?.length === 0 || !listed_objects.Contents) return;
 
-  // Create an object to specify the bucket and objects to be deleted
-  const delete_params = {
-    Bucket: process.env.S3_BUCKET_NAME,
-    Delete: { Objects: [] },
-  };
+	// Create an object to specify the bucket and objects to be deleted
+	const delete_params = {
+		Bucket: process.env.S3_BUCKET_NAME,
+		Delete: { Objects: [] },
+	};
 
-  // Iterate over each object and push its key to the deleteParams object
-  listed_objects.Contents.forEach(({ Key }) => {
-    delete_params.Delete.Objects.push({ Key });
-  });
+	// Iterate over each object and push its key to the deleteParams object
+	listed_objects.Contents.forEach(({ Key }) => {
+		delete_params.Delete.Objects.push({ Key });
+	});
 
-  // Delete the objects specified in deleteParams
-  await s3.send(new DeleteObjectsCommand(delete_params));
+	// Delete the objects specified in deleteParams
+	await s3.send(new DeleteObjectsCommand(delete_params));
 
-  // If there are more objects to delete (truncated result), recursively call the function again
-  // if (listed_objects.IsTruncated) await emptyS3Directory(bucket, dir);
+	// If there are more objects to delete (truncated result), recursively call the function again
+	// if (listed_objects.IsTruncated) await emptyS3Directory(bucket, dir);
 }
 
 async function _renderPost(post) {
-  post.raw_media = [];
-  post.raw_content = post.content;
+	post.raw_media = [];
+	post.raw_content = post.content;
 
-  // For some reason Node does not like to set a variable and leave it.
-  post.media.forEach((media) => post.raw_media.push(media));
+	// For some reason Node does not like to set a variable and leave it.
+	post.media.forEach((media) => post.raw_media.push(media));
 
-  if (post.media) {
-    for (i = 0; post.media.length > i; i++) {
-      post.media[i] = await getMedia({ parent_id: post.id, parent_type: "posts", file_name: post.media[i] });
-    }
-  }
+	if (post.media) {
+		for (i = 0; post.media.length > i; i++) {
+			post.media[i] = await getMedia({ parent_id: post.id, parent_type: "posts", file_name: post.media[i] });
+		}
+	}
 
-  if (post.content) {
-    // Render the markdown contents of the post
-    post.content = md.render(post.content);
+	if (post.content) {
+		// Render the markdown contents of the post
+		post.content = md.render(post.content);
 
-    // Replace custom formatting with what we want
-    post.content = _formatBlogContent(post.content, post.media);
-  }
-  return post;
+		// Replace custom formatting with what we want
+		post.content = _formatBlogContent(post.content, post.media);
+	}
+	return post;
 
-  function _formatBlogContent(content, media_list) {
-    // Replace Images
-    const image_regex = /{image:([^}]+)}/g;
+	function _formatBlogContent(content, media_list) {
+		// Replace Images
+		const image_regex = /{image:([^}]+)}/g;
 
-    // Replace Side-by-side
-    const side_by_side = /{sidebyside}(.*?){\/sidebyside}/gs;
+		// Replace Side-by-side
+		const side_by_side = /{sidebyside}(.*?){\/sidebyside}/gs;
 
-    // Replace video links
-    const video = /{video:([^}]+)}/g;
+		// Replace video links
+		const video = /{video:([^}]+)}/g;
 
-    content = content.replace(video, (match, inner_content) => {
-      return `<div class='video-embed'><iframe src="${_getVideoEmbed(inner_content)}" frameborder="0" allow="accelerometer; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div>`;
-    });
+		content = content.replace(video, (match, inner_content) => {
+			return `<div class='video-embed'><iframe src="${_getVideoEmbed(inner_content)}" frameborder="0" allow="accelerometer; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div>`;
+		});
 
-    // Replace Images
-    content = content.replace(image_regex, (match, image_name) => {
-      for (media of media_list) {
-        if (media.includes(image_name)) {
-          return `<div class='image-container'><img src='${media}'></div>`;
-        }
-      }
+		// Replace Images
+		content = content.replace(image_regex, (match, image_name) => {
+			for (media of media_list) {
+				if (media.includes(image_name)) {
+					return `<div class='image-container'><img src='${media}'></div>`;
+				}
+			}
 
-      // Unknown image (Image was probably deleted)
-      return "";
-    });
+			// Unknown image (Image was probably deleted)
+			return "";
+		});
 
-    content = content.replace(side_by_side, (match, inner_content) => {
-      return `<div class='side-by-side'>${inner_content}</div>`;
-    });
+		content = content.replace(side_by_side, (match, inner_content) => {
+			return `<div class='side-by-side'>${inner_content}</div>`;
+		});
 
-    // Finished formatting, return!
-    return content;
+		// Finished formatting, return!
+		return content;
 
-    function _getVideoEmbed(video_url) {
-      // YouTube
-      if (video_url.includes("youtu.be")) {
-        return `https://youtube.com/embed/${video_url.split("/")[3]}`;
-      }
-      if (video_url.includes("youtube")) {
-        let video_id = video_url.split("/")[3];
-        video_id = video_id.split("watch?v=").pop();
-        return `https://youtube.com/embed/${video_id}`;
-      }
+		function _getVideoEmbed(video_url) {
+			// YouTube
+			if (video_url.includes("youtu.be")) {
+				return `https://youtube.com/embed/${video_url.split("/")[3]}`;
+			}
+			if (video_url.includes("youtube")) {
+				let video_id = video_url.split("/")[3];
+				video_id = video_id.split("watch?v=").pop();
+				return `https://youtube.com/embed/${video_id}`;
+			}
 
-      // Odysee
-      if (video_url.includes("://odysee.com")) {
-        let video_link = `https://${video_url.split("/")[2]}/$/embed/${video_url.split("/")[3]}/${video_url.split("/")[4]}`;
-        return video_link;
-      }
-    }
-  }
+			// Odysee
+			if (video_url.includes("://odysee.com")) {
+				let video_link = `https://${video_url.split("/")[2]}/$/embed/${video_url.split("/")[3]}/${video_url.split("/")[4]}`;
+				return video_link;
+			}
+		}
+	}
 }
 
 async function _getSettings() {
-  // Go though each object key in our settings to get the value if it exists
-  Object.keys(settings).forEach(async (key) => {
-    let found_value = await prisma.setting.findUnique({ where: { id: key } });
-    if (!found_value) return;
+	// Go though each object key in our settings to get the value if it exists
+	Object.keys(settings).forEach(async (key) => {
+		let found_value = await prisma.setting.findUnique({ where: { id: key } });
+		if (!found_value) return;
 
-    let value;
-    // Parse JSON if possible
-    try {
-      value = JSON.parse(found_value.value);
-    } catch {
-      value = found_value.value;
-    }
+		let value;
+		// Parse JSON if possible
+		try {
+			value = JSON.parse(found_value.value);
+		} catch {
+			value = found_value.value;
+		}
 
-    return (settings[key] = value);
-  });
+		return (settings[key] = value);
+	});
 }
 // TODO: Replace
 async function getSetting(key, { parse = true }) {
-  if (!settings[key]) return null;
+	if (!settings[key]) return null;
 
-  if (parse) {
-    return JSON.parse(settings[key]);
-  }
-  return settings[key];
+	if (parse) {
+		return JSON.parse(settings[key]);
+	}
+	return settings[key];
 }
 // TODO: Replace
 async function postSetting(key, value) {
-  try {
-    if (!Object.keys(settings).includes(key)) return { success: false, message: "Setting not valid" };
+	try {
+		if (!Object.keys(settings).includes(key)) return { success: false, message: "Setting not valid" };
 
-    await prisma.setting.upsert({ where: { id: key }, update: { value: value }, create: { id: key, value: value } });
-    try {
-      settings[key] = JSON.parse(value);
-    } catch {
-      settings[key] = value;
-    }
+		await prisma.setting.upsert({ where: { id: key }, update: { value: value }, create: { id: key, value: value } });
+		try {
+			settings[key] = JSON.parse(value);
+		} catch {
+			settings[key] = value;
+		}
 
-    return { success: true };
-  } catch (e) {
-    return { success: false, message: e.message };
-  }
+		return { success: true };
+	} catch (e) {
+		return { success: false, message: e.message };
+	}
 }
 // TODO: Replace
 async function editSetting({ name, value }) {
-  if (!Object.keys(settings).includes(name)) return _r(false, "Setting is not valid");
+	if (!Object.keys(settings).includes(name)) return _r(false, "Setting is not valid");
 
-  await prisma.setting.upsert({ where: { id: name }, update: { value: value }, create: { id: name, value: value } });
-  try {
-    settings[key] = JSON.parse(value);
-  } catch {
-    settings[key] = value;
-  }
+	await prisma.setting.upsert({ where: { id: name }, update: { value: value }, create: { id: name, value: value } });
+	try {
+		settings[key] = JSON.parse(value);
+	} catch {
+		settings[key] = value;
+	}
 
-  return _r(true);
+	return _r(true);
 }
 
 function _stripPrivatePost(post) {
-  if (!post) return;
-  if (post.owner) delete post.owner.password;
-  return post;
+	if (!post) return;
+	if (post.owner) delete post.owner.password;
+	return post;
 }
 const _r = (s, m) => {
-  return { success: s, message: m };
+	return { success: s, message: m };
 };
 
 module.exports = { settings, newUser, getUser, editUser, getPost, newPost, editPost, deletePost, getBiography, updateBiography, uploadMedia, getTags, postSetting, getSetting };
diff --git a/frontend/views/themes/default/css/settings.css b/frontend/views/themes/default/css/settings.css
index 3e651c2..39bfbf0 100644
--- a/frontend/views/themes/default/css/settings.css
+++ b/frontend/views/themes/default/css/settings.css
@@ -120,4 +120,42 @@ input:checked + .slider:before {
 
 .slider.round:before {
   border-radius: 50%;
+}
+
+dialog {
+  border-radius: 5px;
+  border: 0;
+  min-width: 300px;
+}
+dialog .title {
+  font-size: 1.1rem;
+  text-align: center;
+  margin-bottom: 1rem;
+}
+dialog .entry {
+  width: 100%;
+  margin-bottom: 0.5rem;
+}
+dialog .entry input {
+  width: 100%;
+  margin: 0;
+  box-sizing: border-box;
+  font-size: 1.1rem;
+}
+dialog .status {
+  margin-bottom: 1rem;
+  color: red;
+  text-align: center;
+}
+dialog .horizontal-button-container {
+  display: flex;
+  flex-direction: row;
+}
+dialog .horizontal-button-container * {
+  flex-grow: 1;
+  margin: 0 0.1rem;
+}
+
+dialog::backdrop {
+  background-color: rgba(0, 0, 0, 0.5);
 }
\ No newline at end of file
diff --git a/frontend/views/themes/default/css/settings.scss b/frontend/views/themes/default/css/settings.scss
index 6679347..2c3a9a0 100644
--- a/frontend/views/themes/default/css/settings.scss
+++ b/frontend/views/themes/default/css/settings.scss
@@ -125,3 +125,44 @@ input:checked + .slider:before {
 .slider.round:before {
   border-radius: 50%;
 }
+
+dialog {
+  border-radius: 5px;
+  border: 0;
+  min-width: 300px;
+
+  .title {
+    font-size: 1.1rem;
+    text-align: center;
+    margin-bottom: 1rem;
+  }
+
+  .entry {
+    width: 100%;
+    margin-bottom: 0.5rem;
+    input {
+      width: 100%;
+      margin: 0;
+      box-sizing: border-box;
+      font-size: 1.1rem;
+    }
+  }
+
+  .status {
+    margin-bottom: 1rem;
+    color: red;
+    text-align: center;
+  }
+
+  .horizontal-button-container {
+    display: flex;
+    flex-direction: row;
+    * {
+      flex-grow: 1;
+      margin: 0 0.1rem;
+    }
+  }
+}
+dialog::backdrop {
+  background-color: rgba(0, 0, 0, 0.5);
+}
diff --git a/frontend/views/themes/default/ejs/authorEdit.ejs b/frontend/views/themes/default/ejs/authorEdit.ejs
index 9bcf489..68548df 100644
--- a/frontend/views/themes/default/ejs/authorEdit.ejs
+++ b/frontend/views/themes/default/ejs/authorEdit.ejs
@@ -1,43 +1,67 @@
 <!DOCTYPE html>
 <html lang="">
-  <head>
-    <%- include("partials/document-head.ejs") %>
-    <link rel="stylesheet" type="text/css" href="/css/settings.css" />
-    <link rel="stylesheet" type="text/css" href="/css/generic.css" />
-    <script src="/js/generic.js"></script>
-    <title>Yet-Another-Blog</title>
-  </head>
-  <body>
-    <%- include("partials/header.ejs") %>
-    <div class="page">
-      <div class="page-center">
-        <div class="header">User Settings</div>
-        <div class="setting-list">
-          <div class="setting">
-            <div class="title">Display Name</div>
-            <div class="value">
-              <input id="display_name" value="<%- profile.owner.display_name -%>" onchange="changeValue(this.id, this)" type="text" />
-            </div>
-          </div>
-          <div class="setting">
-            <div class="title">Change Password</div>
-            <button class="button bad"><span>Open Dialog</span></button>
-          </div>
-          <div class="setting">
-            <div class="title">Change Profile Picture</div>
-            <div class="value">
-              <input id="profile_picture" onchange="changeValue(this.id, this)" type="file" />
-            </div>
-          </div>
-        </div>
-      </div>
-      <div class="page-center">
-        <div class="header">Biography</div>
-        <%- include("partials/richTextEditor.ejs", {text_selector: 'post-content', prefill: profile.raw_content}) %>
-        <button class="button" onclick="updateBiography()"><span>Save Biography</span></button>
-      </div>
-    </div>
-    <%- include("partials/footer.ejs") %>
-  </body>
+	<head>
+		<%- include("partials/document-head.ejs") %>
+		<link rel="stylesheet" type="text/css" href="/css/settings.css" />
+		<link rel="stylesheet" type="text/css" href="/css/generic.css" />
+		<script src="/js/generic.js"></script>
+		<title>Yet-Another-Blog</title>
+	</head>
+	<body>
+		<dialog id="change-password-dialog">
+			<div class="title">
+				<span>Change Password</span>
+			</div>
+
+			<div class="entry">
+				<div>Current password</div>
+				<input id="cp-current" type="password" oninput="changePasswordInputUpdate()" />
+			</div>
+			<div class="entry">
+				<div>New password</div>
+				<input id="cp-new-1" type="password" oninput="changePasswordInputUpdate()" />
+			</div>
+			<div class="entry">
+				<div>Confirm password</div>
+				<input id="cp-new-2" type="password" oninput="changePasswordInputUpdate()" />
+			</div>
+			<div class="status">Please enter your current password.</div>
+			<div class="horizontal-button-container">
+				<button class="button good" onclick="sendPasswordUpdate()">Accept</button>
+				<button id="cp-cancel" class="button bad">Cancel</button>
+			</div>
+		</dialog>
+
+		<%- include("partials/header.ejs") %>
+		<div class="page">
+			<div class="page-center">
+				<div class="header">User Settings</div>
+				<div class="setting-list">
+					<div class="setting">
+						<div class="title">Display Name</div>
+						<div class="value">
+							<input id="display_name" value="<%- profile.owner.display_name -%>" onchange="changeValue(this.id, this)" type="text" />
+						</div>
+					</div>
+					<div class="setting">
+						<div class="title">Change Password</div>
+						<button id="change-password-button" class="button bad"><span>Open Dialog</span></button>
+					</div>
+					<div class="setting">
+						<div class="title">Change Profile Picture</div>
+						<div class="value">
+							<input id="profile_picture" onchange="changeValue(this.id, this)" type="file" />
+						</div>
+					</div>
+				</div>
+			</div>
+			<div class="page-center">
+				<div class="header">Biography</div>
+				<%- include("partials/richTextEditor.ejs", {text_selector: 'post-content', prefill: profile.raw_content}) %>
+				<button class="button" onclick="updateBiography()"><span>Save Biography</span></button>
+			</div>
+		</div>
+		<%- include("partials/footer.ejs") %>
+	</body>
 </html>
 <script defer src="/js/editAuthor.js"></script>
diff --git a/frontend/views/themes/default/js/editAuthor.js b/frontend/views/themes/default/js/editAuthor.js
index 6856e07..6f59d74 100644
--- a/frontend/views/themes/default/js/editAuthor.js
+++ b/frontend/views/themes/default/js/editAuthor.js
@@ -1,12 +1,37 @@
 async function changeValue(setting_name, element) {
-  const form = {
-    setting_name: setting_name,
-    value: element.value,
-    id: window.location.href.split("/")[4],
-  };
-  const response = await request(`/api/web/user`, "PATCH", form);
+	const form = {
+		setting_name: setting_name,
+		value: element.value,
+		id: window.location.href.split("/")[4],
+	};
+	const response = await request(`/api/web/user`, "PATCH", form);
 
-  // TODO: On failure, notify the user
-  if (response.body.success) {
-  }
+	// TODO: On failure, notify the user
+	if (response.body.success) {
+		alert("Successfully changed password");
+	}
+}
+const change_password_dialog = qs("#change-password-dialog");
+
+qs("#change-password-button").addEventListener("click", () => change_password_dialog.showModal());
+qs("#cp-cancel").addEventListener("click", () => change_password_dialog.close());
+
+function changePasswordInputUpdate() {
+	const status = qs("#change-password-dialog .status");
+	const current_password = qs("#cp-current");
+	const new_password_1 = qs("#cp-new-1");
+	const new_password_2 = qs("#cp-new-2");
+
+	if (current_password.value === "") return (status.innerText = "Please enter your current password.");
+
+	if (new_password_1.value !== new_password_2.value) return (status.innerText = "New password does not match.");
+
+	return (status.innerHTML = "&nbsp;");
+}
+
+function sendPasswordUpdate() {
+	const new_password_1 = qs("#cp-new-1");
+	// Check fields match
+	// Send post update
+	changeValue("password", new_password_1);
 }