user: add a SetPassword function to the user struct
user: return 204 no content on success when signing in
user: add change password functionality