change "/api/users/validate_userpassword" with "/public/api/users/validate_userpassword"
v1.6.4