api.md: rename /password/change to /password/change/start