@RequestMapping(value = "/account", method = RequestMethod.POST)
public ModelAndView accountEdit(@RequestParam("account") String user1, HttpServletRequest request) {
    User user = userService.findByEmail(SecurityContextHolder.getContext().getAuthentication().getName());

    ModelAndView modelAndView = new ModelAndView();
    modelAndView.addObject("user", user);
    modelAndView.setViewName("account");

    String email = request.getParameter("email");
    if (!email.isEmpty()) {
        user.setEmail(email);
    }
    String username = request.getParameter("name");
    if (!username.isEmpty()) {
        user.setUsername(username);
    }

    String currentPassword = request.getParameter("currentPassword");
    String newPassword = request.getParameter("newPassword");
    String confirmPassword = request.getParameter("confirmPassword");

    if (!newPassword.isEmpty() && !confirmPassword.isEmpty()) {
        if(!newPassword.equals(confirmPassword)) {
            modelAndView.addObject("errorMessage", "Пароли не совпадают");
            return modelAndView;
        }
        user.setPassword(newPassword);
        userService.saveUser(user);
        System.out.println(user.getPassword());
        return modelAndView;
    }

    modelAndView.addObject("user", user);
    return modelAndView;
}

if (bCryptPasswordEncoder.matches(currentPassword, user.getPassword()))