editPassword works. tested with postman