#76: removed validation from service
#76: added userId to changePasswordCommand
#76: not resolved bindingResult issue