Return BAD REQUEST if token has wrong encoding when trying to changePasswordForUser.