Few changes to password change including jwt use