Moved password changing logic from Login controller to Credentials controller.