feat(controller): add "deis auth:passwd" to update password

Closes #1583.
IMO this goes against RESTful API best practices. If we're changing the password for a user, we should be exposing a `/v1/auth/<username>` endpoint which we can either PUT or PATCH the password.