Allow token auth for 'change password' view.