user/updatePasswoord now returns new apiKey