Mark the session auth after login
Creation of postChangePassword

With route POST /user/password
{
"password": String,
"oldPassword": String
}