Fix password change

The request data is a JSON dict rather than a form