Remove obsolete 'change-password' controller API endpoint (#221)