fix change password request to use application/json dataType