Added User change-auth API endpoint replacing change-password (#221)