Add password change endpoint