Add security questions to User Profile

If user adds a security question to his profile, anyone who tries to change or to reset his password or other details must first answer at that question.

For example: someone can find an user password and try to change it, so, if the user has a security question, his password can't be changed.

Examples of security questions: http://goodsecurityquestions.com/examples.htm