Allow the user password to be changed from the user API endpoint