api: fix changePassword documentation
api: use bad request instead of precondition failed for validation error
api: return 400 instead of 412 for invalid names in createApp