Added change password API docs and updated controller by removing some extra validation.