Added api checking of password on changePassword. However with #100 there should still be a js check for this