[fix] return forbidden if the user request the change-password more than
one time
Merge pull request #77 from osiam/issue-63-server-error

[fix] return forbidden if the user request the change-password more than