JsonLoginPasswordChange request handler #3

Also corrected issue in JsonLogin where `response_object` was called on `self` (shouldn't!)

Added `Content-Type` headers where they were previously missing.