Allow the login server to authenticate a password change with either an emailed token, or a username and password

Necessary to support the change password page of the login server

[#66711370]