Fixed routes with access token.

- implement initial change password.
Fixed asset listing when you first logged in to the system, and added some minor ui changes