Added route to handle password changes