Allow users to change their passphrase

Can we use the same authentication header from #retrive in changePassphrase? (and old others call that need authentication?)