There should be an admin API function for changing a user's password