[DO NOT MERGE] 620 change user password

Yet to add final step on reset  password functionality using reset token.
instead of line 122 to 125, just put `return Response(status=status.HTTP_400_BAD_REQUEST)` after and outside the `if` statement