[change] the user password can also be changed by clients

because then I also have to get the [access token](https://github.com/osiam/addon-self-administration/pull/54/files#diff-6a6b2bf8cadc34a8b0b418a3f12005ffR264), and also need to check the [onetimepassword](https://github.com/osiam/addon-self-administration/pull/54/files#diff-6a6b2bf8cadc34a8b0b418a3f12005ffR256) in the calling method before call [this method](https://github.com/osiam/addon-self-administration/pull/54/files#diff-6a6b2bf8cadc34a8b0b418a3f12005ffR253)