Authentication updates

Removed references to obsolete session Grace Period.
Now with JWT we don't have a grace period, just an expiration date.
Also updated to point to correct Change Password API on SVMP
Overseer.