[fix] return forbidden if the user request the change-password more than

Bugfix for [Issue 63](https://github.com/osiam/addon-self-administration/issues/63)