Password changing now REST-compliant