Fixed: forgot token in the password changing request